7:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x80000000}}) 17:31:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x25dfdbfe, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x2e}, 0x4e24, 0x91, 0x4e20, 0x7fff, 0x2, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x2}}) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2, &(0x7f0000000280)={&(0x7f00000002c0)={0x7d, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI, @NLBL_CALIPSO_A_MTYPE]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x25dfdbfe, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x2e}, 0x4e24, 0x91, 0x4e20, 0x7fff, 0x2, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x25dfdbfe, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x2e}, 0x4e24, 0x91, 0x4e20, 0x7fff, 0x2, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x2e}, 0x4e24, 0x91, 0x4e20, 0x7fff, 0x2, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2, &(0x7f0000000280)={&(0x7f00000002c0)={0x7d, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI, @NLBL_CALIPSO_A_MTYPE]}, 0x24}}, 0x44) 17:31:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x4e24, 0x91, 0x4e20, 0x7fff, 0x2, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2, &(0x7f0000000280)={&(0x7f00000002c0)={0x7d, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI, @NLBL_CALIPSO_A_MTYPE]}, 0x24}}, 0x0) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x91, 0x4e20, 0x7fff, 0x2, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x4e20, 0x7fff, 0x2, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x7fff, 0x2, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2}}, 0xb8}}, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2}}, 0xb8}}, 0x0) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:35 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {0x0, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {0x0, 0x0, 0x0, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {0x0, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {0x0, 0x0, 0x0, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:31:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20000000) 17:31:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2}}, 0xb8}}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2}}, 0xb8}}, 0x0) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x2}}, 0xb8}}, 0x0) 17:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}}, 0xb8}}, 0x20000000) 17:31:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:37 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:37 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20000000) 17:31:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:37 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20000000) 17:31:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:37 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20000000) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x20000000) 17:31:39 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20000000) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20000000) 17:31:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:31:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2, &(0x7f0000000280)={&(0x7f00000002c0)={0x7d, 0x0, 0x0, 0x0, 0x25dfdbf9, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x0, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x20000000) 17:31:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x5, 0x401, 0x4, 0x5, 0xfffffffffffffff8, 0x6, 0xec, 0xffffffffffffff01}, {0x3, 0x0, 0xffff, 0x7}, 0x2, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) 17:31:39 executing program 1: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0x2, &(0x7f0000000280)={&(0x7f00000002c0)={0x7d, 0x0, 0x300, 0x70bd3c, 0x25dfdbf9, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x0, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:39 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x2, 0x0, 0xfff, 0x3, 0x80000000}}) 17:31:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 17:31:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x20000000) 17:31:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:40 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x1, 0x1, @start={0x3, 0x1}}) ioperm(0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0x2, &(0x7f0000000280)={&(0x7f00000002c0)={0x7d, 0x0, 0x300, 0x70bd3c, 0x25dfdbf9, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x0, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:40 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x1, 0x1, @start={0x3, 0x1}}) ioperm(0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0x2, &(0x7f0000000280)={&(0x7f00000002c0)={0x7d, 0x0, 0x300, 0x70bd3c, 0x25dfdbf9, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x0, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44) 17:31:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1202, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000200)={0x9, 0x0, [], {0x0, @reserved}}) ioperm(0x0, 0x2, 0x3) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0xd242, 0xff, 0x80000001, 0x6}}) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f00000002c0)={0x2, 0x3, @start={0x6}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r2) 17:31:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 17:31:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x1e8}, 0x1, 0x0, 0x0, 0x20044094}, 0x40) 17:31:40 executing program 1: ioperm(0x8, 0x785, 0x9) prctl$PR_SET_FPEXC(0xc, 0x10000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x2) 17:31:40 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x210000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x44000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000040)={0xe, {0x81, 0x39, 0x1f, 0x7f}}) 17:31:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 17:31:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) [ 550.102942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:40 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x13, @sliced={0x1ff, [0x80, 0x6317, 0xfc01, 0x1f, 0x8, 0x3, 0x7, 0x7fff, 0xff19, 0x40, 0x4, 0x4, 0x9, 0x4, 0xff81, 0x6, 0x6, 0xffff, 0xfff, 0x2, 0x1, 0x7ff, 0x6, 0xfffb, 0x4, 0x55, 0x2, 0xfffb, 0x200, 0x3, 0x7, 0x78, 0x1f, 0x14b5, 0x6ca, 0x1000, 0x3, 0x2, 0x8, 0x101, 0xd2, 0x6, 0x0, 0x6, 0x200, 0x9, 0xd67, 0x4], 0x8}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = geteuid() sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@report={0x68, 0x20, 0x100, 0x70bd2c, 0x25dfdbff, {0x33, {@in=@empty, @in6=@remote, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0xa0, 0xa0, 0x3a, 0x0, r3}}, [@XFRMA_IF_ID={0x8}, @replay_thresh={0x8, 0xb, 0x401}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x24044050) 17:31:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 17:31:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:40 executing program 5: lookup_dcookie(0x5e, &(0x7f0000000140)=""/138, 0x8a) socket$inet(0x2, 0x0, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@flushsa={0xc4, 0x1c, 0x20, 0x0, 0x2, {0x6c}, [@algo_auth={0x5d, 0x1, {{'sha384-avx2\x00'}, 0xa8, "b27ad44778ac3e8529b33a429ae7f5fe7029d4d113"}}, @migrate={0x50, 0x11, [{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@dev={0xfe, 0x80, [], 0x37}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0xc4}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000200)={0x0, 0x2, 0x4, [], &(0x7f0000000000)=0x4}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000440)=""/4096) 17:31:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 17:31:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0], 0x64}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000) 17:31:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 17:31:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:40 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000080)) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f00000000c0)=0xfffff097) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x8, 0x1, 0x3}}) 17:31:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 17:31:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0], 0x64}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000) 17:31:40 executing program 2: ioperm(0x8, 0xf3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000000)=0x93) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x440, 0x0) 17:31:41 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x13, @sliced={0x1ff, [0x80, 0x6317, 0xfc01, 0x1f, 0x8, 0x3, 0x7, 0x7fff, 0xff19, 0x40, 0x4, 0x4, 0x9, 0x4, 0xff81, 0x6, 0x6, 0xffff, 0xfff, 0x2, 0x1, 0x7ff, 0x6, 0xfffb, 0x4, 0x55, 0x2, 0xfffb, 0x200, 0x3, 0x7, 0x78, 0x1f, 0x14b5, 0x6ca, 0x1000, 0x3, 0x2, 0x8, 0x101, 0xd2, 0x6, 0x0, 0x6, 0x200, 0x9, 0xd67, 0x4], 0x8}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = geteuid() sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@report={0x68, 0x20, 0x100, 0x70bd2c, 0x25dfdbff, {0x33, {@in=@empty, @in6=@remote, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0xa0, 0xa0, 0x3a, 0x0, r3}}, [@XFRMA_IF_ID={0x8}, @replay_thresh={0x8, 0xb, 0x401}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x24044050) 17:31:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 17:31:41 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 17:31:41 executing program 2: ioperm(0x8, 0xf3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000000)=0x93) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x440, 0x0) 17:31:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:41 executing program 0: socket$inet(0x2, 0x0, 0x4) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109040, 0x0) connect$bt_sco(r2, &(0x7f0000000140), 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="c40000001c00200000000000000000006c5d0001007368613338342d6176783200000000000000000000000000000000000000000000000000000000000000000000000000001aad67e30000000000000000000000a8000000b27ad44778ac3f8529b33a429ae7f5fe7029d4d11300000050000000000000000000200100000000000a000000000000000100000000000000000000000000000000ac1414aa00"/196], 0xc4}}, 0x0) 17:31:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:41 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:41 executing program 2: ioperm(0x8, 0xf3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000000)=0x93) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x440, 0x0) 17:31:41 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:42 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x13, @sliced={0x1ff, [0x80, 0x6317, 0xfc01, 0x1f, 0x8, 0x3, 0x7, 0x7fff, 0xff19, 0x40, 0x4, 0x4, 0x9, 0x4, 0xff81, 0x6, 0x6, 0xffff, 0xfff, 0x2, 0x1, 0x7ff, 0x6, 0xfffb, 0x4, 0x55, 0x2, 0xfffb, 0x200, 0x3, 0x7, 0x78, 0x1f, 0x14b5, 0x6ca, 0x1000, 0x3, 0x2, 0x8, 0x101, 0xd2, 0x6, 0x0, 0x6, 0x200, 0x9, 0xd67, 0x4], 0x8}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = geteuid() sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@report={0x68, 0x20, 0x100, 0x70bd2c, 0x25dfdbff, {0x33, {@in=@empty, @in6=@remote, 0x4e22, 0x0, 0x4e22, 0x1, 0xa, 0xa0, 0xa0, 0x3a, 0x0, r3}}, [@XFRMA_IF_ID={0x8}, @replay_thresh={0x8, 0xb, 0x401}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x24044050) 17:31:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:42 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:42 executing program 0: socket$inet(0x2, 0x0, 0x4) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109040, 0x0) connect$bt_sco(r2, &(0x7f0000000140), 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="c40000001c00200000000000000000006c5d0001007368613338342d6176783200000000000000000000000000000000000000000000000000000000000000000000000000001aad67e30000000000000000000000a8000000b27ad44778ac3f8529b33a429ae7f5fe7029d4d11300000050000000000000000000200100000000000a000000000000000100000000000000000000000000000000ac1414aa00"/196], 0xc4}}, 0x0) 17:31:42 executing program 2: ioperm(0x8, 0xf3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000000)=0x93) 17:31:42 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:42 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:42 executing program 2: ioperm(0x8, 0xf3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prctl$PR_GET_CHILD_SUBREAPER(0x25) 17:31:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:42 executing program 0: socket$inet(0x2, 0x0, 0x4) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109040, 0x0) connect$bt_sco(r2, &(0x7f0000000140), 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="c40000001c00200000000000000000006c5d0001007368613338342d6176783200000000000000000000000000000000000000000000000000000000000000000000000000001aad67e30000000000000000000000a8000000b27ad44778ac3f8529b33a429ae7f5fe7029d4d11300000050000000000000000000200100000000000a000000000000000100000000000000000000000000000000ac1414aa00"/196], 0xc4}}, 0x0) 17:31:42 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:42 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x13, @sliced={0x1ff, [0x80, 0x6317, 0xfc01, 0x1f, 0x8, 0x3, 0x7, 0x7fff, 0xff19, 0x40, 0x4, 0x4, 0x9, 0x4, 0xff81, 0x6, 0x6, 0xffff, 0xfff, 0x2, 0x1, 0x7ff, 0x6, 0xfffb, 0x4, 0x55, 0x2, 0xfffb, 0x200, 0x3, 0x7, 0x78, 0x1f, 0x14b5, 0x6ca, 0x1000, 0x3, 0x2, 0x8, 0x101, 0xd2, 0x6, 0x0, 0x6, 0x200, 0x9, 0xd67, 0x4], 0x8}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) geteuid() 17:31:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:42 executing program 2: ioperm(0x8, 0xf3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 17:31:42 executing program 0: socket$inet(0x2, 0x0, 0x4) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109040, 0x0) connect$bt_sco(r1, &(0x7f0000000140), 0x8) 17:31:42 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:43 executing program 2: ioperm(0x8, 0xf3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:43 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:43 executing program 2: ioperm(0x8, 0xf3, 0x0) 17:31:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:43 executing program 0: socket$inet(0x2, 0x0, 0x4) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109040, 0x0) 17:31:43 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x13, @sliced={0x1ff, [0x80, 0x6317, 0xfc01, 0x1f, 0x8, 0x3, 0x7, 0x7fff, 0xff19, 0x40, 0x4, 0x4, 0x9, 0x4, 0xff81, 0x6, 0x6, 0xffff, 0xfff, 0x2, 0x1, 0x7ff, 0x6, 0xfffb, 0x4, 0x55, 0x2, 0xfffb, 0x200, 0x3, 0x7, 0x78, 0x1f, 0x14b5, 0x6ca, 0x1000, 0x3, 0x2, 0x8, 0x101, 0xd2, 0x6, 0x0, 0x6, 0x200, 0x9, 0xd67, 0x4], 0x8}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:31:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:43 executing program 2: ioperm(0x0, 0xf3, 0x0) 17:31:43 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:43 executing program 2: ioperm(0x0, 0x0, 0x0) 17:31:43 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:43 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:43 executing program 0: socket$inet(0x2, 0x0, 0x4) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) 17:31:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:44 executing program 2: ioperm(0x0, 0x0, 0x0) 17:31:44 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:44 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 17:31:44 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x13, @sliced={0x1ff, [0x80, 0x6317, 0xfc01, 0x1f, 0x8, 0x3, 0x7, 0x7fff, 0xff19, 0x40, 0x4, 0x4, 0x9, 0x4, 0xff81, 0x6, 0x6, 0xffff, 0xfff, 0x2, 0x1, 0x7ff, 0x6, 0xfffb, 0x4, 0x55, 0x2, 0xfffb, 0x200, 0x3, 0x7, 0x78, 0x1f, 0x14b5, 0x6ca, 0x1000, 0x3, 0x2, 0x8, 0x101, 0xd2, 0x6, 0x0, 0x6, 0x200, 0x9, 0xd67, 0x4], 0x8}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:44 executing program 0: socket$inet(0x2, 0x0, 0x4) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:44 executing program 2: ioperm(0x0, 0x0, 0x0) 17:31:44 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:44 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:44 executing program 2: socket$inet(0x2, 0x0, 0x4) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) 17:31:44 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:44 executing program 0: socket$inet(0x2, 0x0, 0x4) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:45 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x13, @sliced={0x1ff, [0x80, 0x6317, 0xfc01, 0x1f, 0x8, 0x3, 0x7, 0x7fff, 0xff19, 0x40, 0x4, 0x4, 0x9, 0x4, 0xff81, 0x6, 0x6, 0xffff, 0xfff, 0x2, 0x1, 0x7ff, 0x6, 0xfffb, 0x4, 0x55, 0x2, 0xfffb, 0x200, 0x3, 0x7, 0x78, 0x1f, 0x14b5, 0x6ca, 0x1000, 0x3, 0x2, 0x8, 0x101, 0xd2, 0x6, 0x0, 0x6, 0x200, 0x9, 0xd67, 0x4], 0x8}}) 17:31:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:45 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 17:31:45 executing program 0: socket$inet(0x2, 0x0, 0x4) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:45 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:45 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:45 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:45 executing program 0: socket$inet(0x2, 0x0, 0x4) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:46 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) 17:31:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:46 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) 17:31:46 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:46 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x20000000) 17:31:47 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) 17:31:47 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x20000000) 17:31:47 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) 17:31:47 executing program 5: socket$inet(0x2, 0x0, 0x4) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109040, 0x0) connect$bt_sco(r1, &(0x7f0000000140), 0x8) 17:31:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x70bd25, 0x8, [0x280000, 0x7, 0x2, 0xffffffff]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 17:31:47 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x0) 17:31:47 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) 17:31:47 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) 17:31:47 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) 17:31:47 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x2, @sliced={0x2, [0x2, 0x7, 0x8000, 0x7, 0x401, 0x3, 0x200, 0xfff, 0xd3, 0xe49, 0xfffc, 0x6, 0x5, 0x223, 0xbe8, 0x1, 0x1, 0x4, 0x4, 0xac, 0x55d, 0x800, 0x5f40, 0x5, 0xe7b5, 0x7, 0x0, 0x400, 0xcb, 0x55, 0x100, 0x80, 0x3, 0x7fff, 0xfe00, 0x6, 0x7fff, 0xb7, 0x0, 0x4, 0x7, 0x0, 0x8, 0x0, 0x6174, 0x7, 0x9, 0x5], 0x7}}) r1 = geteuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) ioperm(0x4, 0x4, 0x10082) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f00000002c0)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000380)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x428902, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="cab56081", 0x4, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, r5, 0x1) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x40, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0x8004510b, &(0x7f0000000340)) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) 17:31:47 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x140}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) 17:31:47 executing program 0: syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:47 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) 17:31:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x0) 17:31:47 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x0) 17:31:47 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x140}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) 17:31:47 executing program 0: syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:47 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x0) 17:31:47 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x140}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) 17:31:47 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) 17:31:47 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) 17:31:47 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) 17:31:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x0) 17:31:47 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) 17:31:47 executing program 0: syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:47 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:47 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) 17:31:47 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) 17:31:47 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x140}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) 17:31:47 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80242, 0x0) 17:31:47 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, 0x0) 17:31:48 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) 17:31:48 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80242, 0x0) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, 0x0) 17:31:48 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) 17:31:48 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x140}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) 17:31:48 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80242, 0x0) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, 0x0) 17:31:48 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) 17:31:48 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x140}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) 17:31:48 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) ioperm(0x0, 0x2, 0x3) 17:31:48 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) 17:31:48 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x0, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:48 executing program 2: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x80242, 0x0) 17:31:48 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) 17:31:48 executing program 2: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x0, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:48 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80242, 0x0) 17:31:48 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 17:31:48 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x0, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x2, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:48 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) 17:31:48 executing program 2: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80242, 0x0) 17:31:48 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80242, 0x0) 17:31:48 executing program 2: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x0, 0x7, 0x5, 0x200, 0x1, 0x2}) 17:31:48 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) socket$packet(0x11, 0x3, 0x300) 17:31:48 executing program 2: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x0, 0x0, 0x5, 0x200, 0x1, 0x2}) 17:31:48 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) 17:31:48 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) 17:31:48 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 2: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 1: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x0, 0x0, 0x0, 0x200, 0x1, 0x2}) 17:31:48 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) 17:31:48 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) 17:31:48 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 1: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}) 17:31:48 executing program 2: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 4: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x6000) 17:31:48 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) 17:31:48 executing program 4: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x6000) 17:31:48 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 1: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:48 executing program 4: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x6000) 17:31:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:31:49 executing program 5: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 5: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x2, "6e43c4b0dab417919150af37f1801c1c2f1e428772dceaf110caac5be8878447"}) 17:31:49 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:49 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) 17:31:49 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 0: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) 17:31:49 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:49 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 0: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:49 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) 17:31:49 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 3: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x7) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, 0x0) 17:31:49 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 1: ioperm(0x7fff, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)='\x00') ioperm(0x8, 0x43, 0x10000) 17:31:49 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:49 executing program 4: ioperm(0x7fff, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)='\x00') ioperm(0x8, 0x43, 0x10000) 17:31:49 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x2}}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) ioperm(0x0, 0x2, 0x3) 17:31:49 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:49 executing program 1: ioperm(0x7fff, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)='\x00') ioperm(0x8, 0x43, 0x10000) 17:31:49 executing program 4: ioperm(0x7fff, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)='\x00') ioperm(0x8, 0x43, 0x10000) 17:31:49 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 3: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x2}}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) ioperm(0x0, 0x2, 0x3) 17:31:49 executing program 1: ioperm(0x7fff, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)='\x00') ioperm(0x8, 0x43, 0x10000) 17:31:49 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:49 executing program 4: ioperm(0x7fff, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)='\x00') ioperm(0x8, 0x43, 0x10000) 17:31:49 executing program 3: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 0: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 4: ioperm(0x7fff, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)='\x00') 17:31:49 executing program 2: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 1: ioperm(0x7fff, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) ioperm(0x8, 0x43, 0x10000) 17:31:49 executing program 3: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:49 executing program 0: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:50 executing program 5: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:50 executing program 1: ioperm(0x7fff, 0x100, 0x1) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioperm(0x8, 0x43, 0x10000) 17:31:50 executing program 4: ioperm(0x7fff, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) 17:31:50 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'netpci0\x00'}) 17:31:50 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:50 executing program 1: ioperm(0x7fff, 0x100, 0x1) ioperm(0x8, 0x43, 0x10000) 17:31:50 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xfffffffffffffe67, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf250200000008000200020000000000010003000000080001000100000008000100010000000800010002000000080001000100ff0708000100020000090800020002000000001e020002edff00080001df00000000"], 0x64}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000) 17:31:50 executing program 5: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:50 executing program 4: ioperm(0x7fff, 0x100, 0x1) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 17:31:50 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:50 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'netpci0\x00'}) 17:31:50 executing program 1: ioperm(0x8, 0x43, 0x10000) 17:31:50 executing program 0: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:50 executing program 5: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:50 executing program 4: ioperm(0x7fff, 0x100, 0x1) 17:31:50 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:50 executing program 0 (fault-call:1 fault-nth:0): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:50 executing program 1: ioperm(0x8, 0x43, 0x10000) 17:31:50 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'netpci0\x00'}) 17:31:50 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:50 executing program 1: ioperm(0x8, 0x43, 0x10000) 17:31:50 executing program 4: ioperm(0x0, 0x100, 0x1) [ 560.210703] FAULT_INJECTION: forcing a failure. [ 560.210703] name failslab, interval 1, probability 0, space 0, times 0 17:31:50 executing program 3 (fault-call:1 fault-nth:0): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) [ 560.281820] CPU: 0 PID: 937 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 560.289567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.299185] Call Trace: [ 560.301784] dump_stack+0x1b2/0x281 [ 560.305420] should_fail.cold+0x10a/0x149 [ 560.309572] should_failslab+0xd6/0x130 [ 560.313549] kmem_cache_alloc+0x28e/0x3c0 [ 560.317715] ? sock_destroy_inode+0x60/0x60 [ 560.322052] sock_alloc_inode+0x19/0x250 [ 560.326134] ? sock_destroy_inode+0x60/0x60 [ 560.327769] FAULT_INJECTION: forcing a failure. [ 560.327769] name failslab, interval 1, probability 0, space 0, times 0 [ 560.330473] alloc_inode+0x5d/0x170 [ 560.330486] new_inode_pseudo+0x14/0xe0 [ 560.330496] sock_alloc+0x3c/0x270 [ 560.330507] __sock_create+0x8a/0x620 [ 560.330521] SyS_socket+0xd1/0x1b0 [ 560.330530] ? move_addr_to_kernel+0x60/0x60 [ 560.330541] ? __do_page_fault+0x159/0xad0 [ 560.330551] ? do_syscall_64+0x4c/0x640 [ 560.330561] ? move_addr_to_kernel+0x60/0x60 [ 560.330571] do_syscall_64+0x1d5/0x640 [ 560.330587] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 560.330595] RIP: 0033:0x467567 [ 560.330600] RSP: 002b:00007fb37a88e0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 560.330610] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 560.330616] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 560.330621] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 560.330635] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff 17:31:50 executing program 1: ioperm(0x0, 0x100, 0x1) ioperm(0x8, 0x43, 0x10000) 17:31:50 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) [ 560.426343] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 [ 560.433802] CPU: 1 PID: 948 Comm: syz-executor.3 Not tainted 4.14.221-syzkaller #0 [ 560.441547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.450903] Call Trace: [ 560.451552] socket: no more sockets [ 560.453490] dump_stack+0x1b2/0x281 [ 560.453508] should_fail.cold+0x10a/0x149 [ 560.453523] should_failslab+0xd6/0x130 [ 560.453537] kmem_cache_alloc+0x28e/0x3c0 [ 560.473130] ? sock_destroy_inode+0x60/0x60 [ 560.477466] sock_alloc_inode+0x19/0x250 17:31:50 executing program 1: ioperm(0x0, 0x0, 0x1) ioperm(0x8, 0x43, 0x10000) [ 560.481709] ? sock_destroy_inode+0x60/0x60 [ 560.486136] alloc_inode+0x5d/0x170 [ 560.489860] new_inode_pseudo+0x14/0xe0 [ 560.493847] sock_alloc+0x3c/0x270 [ 560.497500] __sock_create+0x8a/0x620 [ 560.501581] SyS_socket+0xd1/0x1b0 [ 560.505128] ? move_addr_to_kernel+0x60/0x60 [ 560.509982] ? __do_page_fault+0x159/0xad0 [ 560.514224] ? do_syscall_64+0x4c/0x640 [ 560.518203] ? move_addr_to_kernel+0x60/0x60 [ 560.522621] do_syscall_64+0x1d5/0x640 [ 560.526524] entry_SYSCALL_64_after_hwframe+0x46/0xbb 17:31:50 executing program 1: ioperm(0x0, 0x0, 0x1) ioperm(0x8, 0x43, 0x10000) 17:31:50 executing program 0 (fault-call:1 fault-nth:1): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) [ 560.531717] RIP: 0033:0x467567 [ 560.534931] RSP: 002b:00007f8aa25510f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 560.542684] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 560.549960] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 560.557268] RBP: 00007f8aa25521d0 R08: 0000000000000000 R09: 0000000000000000 [ 560.564547] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 560.571845] R13: 00007fff7982e40f R14: 00007f8aa2552300 R15: 0000000000022000 17:31:50 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) 17:31:50 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 17:31:50 executing program 4: ioperm(0x0, 0x0, 0x1) [ 560.601196] socket: no more sockets 17:31:50 executing program 3 (fault-call:1 fault-nth:1): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:50 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) 17:31:50 executing program 5 (fault-call:1 fault-nth:0): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:50 executing program 1: ioperm(0x0, 0x0, 0x1) ioperm(0x8, 0x43, 0x10000) 17:31:50 executing program 4: ioperm(0x0, 0x0, 0x1) [ 560.684850] FAULT_INJECTION: forcing a failure. [ 560.684850] name failslab, interval 1, probability 0, space 0, times 0 [ 560.708573] FAULT_INJECTION: forcing a failure. [ 560.708573] name failslab, interval 1, probability 0, space 0, times 0 [ 560.750857] CPU: 1 PID: 974 Comm: syz-executor.3 Not tainted 4.14.221-syzkaller #0 [ 560.759645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.769007] Call Trace: [ 560.771604] dump_stack+0x1b2/0x281 [ 560.775243] should_fail.cold+0x10a/0x149 [ 560.779399] should_failslab+0xd6/0x130 [ 560.783380] kmem_cache_alloc_trace+0x29a/0x3d0 [ 560.788059] ? kmem_cache_alloc+0x35f/0x3c0 [ 560.792388] sock_alloc_inode+0x5f/0x250 [ 560.796452] ? sock_destroy_inode+0x60/0x60 [ 560.800778] alloc_inode+0x5d/0x170 [ 560.804413] new_inode_pseudo+0x14/0xe0 [ 560.808390] sock_alloc+0x3c/0x270 [ 560.811967] __sock_create+0x8a/0x620 [ 560.815777] SyS_socket+0xd1/0x1b0 [ 560.819339] ? move_addr_to_kernel+0x60/0x60 [ 560.824268] ? __do_page_fault+0x159/0xad0 [ 560.828506] ? do_syscall_64+0x4c/0x640 [ 560.832481] ? move_addr_to_kernel+0x60/0x60 [ 560.836888] do_syscall_64+0x1d5/0x640 [ 560.840787] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 560.845973] RIP: 0033:0x467567 [ 560.849162] RSP: 002b:00007f8aa25510f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 560.856878] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 560.864148] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 560.871440] RBP: 00007f8aa25521d0 R08: 0000000000000000 R09: 0000000000000000 [ 560.878725] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 560.886089] R13: 00007fff7982e40f R14: 00007f8aa2552300 R15: 0000000000022000 [ 560.893464] CPU: 0 PID: 970 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 560.901190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.910548] Call Trace: [ 560.913142] dump_stack+0x1b2/0x281 [ 560.916777] should_fail.cold+0x10a/0x149 [ 560.920963] should_failslab+0xd6/0x130 [ 560.924948] kmem_cache_alloc_trace+0x29a/0x3d0 [ 560.929621] ? kmem_cache_alloc+0x35f/0x3c0 [ 560.931665] socket: no more sockets [ 560.933989] sock_alloc_inode+0x5f/0x250 [ 560.934001] ? sock_destroy_inode+0x60/0x60 [ 560.934011] alloc_inode+0x5d/0x170 17:31:51 executing program 4: ioperm(0x0, 0x0, 0x1) 17:31:51 executing program 4: ioperm(0x0, 0x100, 0x0) [ 560.934022] new_inode_pseudo+0x14/0xe0 [ 560.934033] sock_alloc+0x3c/0x270 [ 560.957264] __sock_create+0x8a/0x620 [ 560.961080] SyS_socket+0xd1/0x1b0 [ 560.964628] ? move_addr_to_kernel+0x60/0x60 [ 560.969042] ? __do_page_fault+0x159/0xad0 [ 560.971134] FAULT_INJECTION: forcing a failure. [ 560.971134] name failslab, interval 1, probability 0, space 0, times 0 [ 560.973370] ? do_syscall_64+0x4c/0x640 [ 560.973383] ? move_addr_to_kernel+0x60/0x60 [ 560.973399] do_syscall_64+0x1d5/0x640 [ 560.996838] entry_SYSCALL_64_after_hwframe+0x46/0xbb 17:31:51 executing program 4: ioperm(0x0, 0x100, 0x0) [ 561.002031] RIP: 0033:0x467567 [ 561.005223] RSP: 002b:00007fb37a88e0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 561.012935] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 561.020201] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 561.027490] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 561.034766] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 561.042035] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 [ 561.049319] CPU: 1 PID: 980 Comm: syz-executor.5 Not tainted 4.14.221-syzkaller #0 [ 561.057041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.066853] Call Trace: [ 561.066881] socket: no more sockets [ 561.069463] dump_stack+0x1b2/0x281 [ 561.069480] should_fail.cold+0x10a/0x149 [ 561.069493] should_failslab+0xd6/0x130 [ 561.069504] kmem_cache_alloc+0x28e/0x3c0 [ 561.069516] ? sock_destroy_inode+0x60/0x60 [ 561.069527] sock_alloc_inode+0x19/0x250 [ 561.097378] ? sock_destroy_inode+0x60/0x60 [ 561.101721] alloc_inode+0x5d/0x170 [ 561.105370] new_inode_pseudo+0x14/0xe0 [ 561.109376] sock_alloc+0x3c/0x270 [ 561.112918] __sock_create+0x8a/0x620 [ 561.116729] SyS_socket+0xd1/0x1b0 [ 561.120458] ? move_addr_to_kernel+0x60/0x60 [ 561.124861] ? __do_page_fault+0x159/0xad0 [ 561.129105] ? do_syscall_64+0x4c/0x640 [ 561.133068] ? move_addr_to_kernel+0x60/0x60 [ 561.137474] do_syscall_64+0x1d5/0x640 [ 561.141360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.146532] RIP: 0033:0x467567 [ 561.149719] RSP: 002b:00007fe25c8120f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 561.157420] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 561.164678] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 561.171955] RBP: 00007fe25c8131d0 R08: 0000000000000000 R09: 0000000000000000 [ 561.179239] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 561.186710] R13: 00007ffdbb20c17f R14: 00007fe25c813300 R15: 0000000000022000 17:31:51 executing program 0 (fault-call:1 fault-nth:2): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:51 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:51 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x8, 0x43, 0x10000) 17:31:51 executing program 4: ioperm(0x0, 0x100, 0x0) 17:31:51 executing program 3 (fault-call:1 fault-nth:2): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:51 executing program 5 (fault-call:1 fault-nth:1): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) [ 561.213330] socket: no more sockets 17:31:51 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) [ 561.291579] FAULT_INJECTION: forcing a failure. [ 561.291579] name failslab, interval 1, probability 0, space 0, times 0 [ 561.297461] FAULT_INJECTION: forcing a failure. [ 561.297461] name failslab, interval 1, probability 0, space 0, times 0 17:31:51 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:51 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) [ 561.332069] FAULT_INJECTION: forcing a failure. [ 561.332069] name failslab, interval 1, probability 0, space 0, times 0 [ 561.352427] CPU: 0 PID: 1013 Comm: syz-executor.5 Not tainted 4.14.221-syzkaller #0 [ 561.360308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.369795] Call Trace: [ 561.372397] dump_stack+0x1b2/0x281 [ 561.376133] should_fail.cold+0x10a/0x149 17:31:51 executing program 4 (fault-call:0 fault-nth:0): ioperm(0x0, 0x100, 0x1) [ 561.380318] should_failslab+0xd6/0x130 [ 561.384309] kmem_cache_alloc_trace+0x29a/0x3d0 [ 561.388989] ? kmem_cache_alloc+0x35f/0x3c0 [ 561.393317] sock_alloc_inode+0x5f/0x250 [ 561.397377] ? sock_destroy_inode+0x60/0x60 [ 561.401696] alloc_inode+0x5d/0x170 [ 561.405412] new_inode_pseudo+0x14/0xe0 [ 561.409389] sock_alloc+0x3c/0x270 [ 561.412933] __sock_create+0x8a/0x620 [ 561.416760] SyS_socket+0xd1/0x1b0 [ 561.420305] ? move_addr_to_kernel+0x60/0x60 [ 561.424742] ? __do_page_fault+0x159/0xad0 17:31:51 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x0, 0x10000) [ 561.429349] ? do_syscall_64+0x4c/0x640 [ 561.433326] ? move_addr_to_kernel+0x60/0x60 [ 561.437838] do_syscall_64+0x1d5/0x640 [ 561.441740] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.447022] RIP: 0033:0x467567 [ 561.450236] RSP: 002b:00007fe25c8120f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 561.457949] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 561.465312] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 561.472597] RBP: 00007fe25c8131d0 R08: 0000000000000000 R09: 0000000000000000 [ 561.473068] FAULT_INJECTION: forcing a failure. [ 561.473068] name failslab, interval 1, probability 0, space 0, times 0 [ 561.479862] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 561.479868] R13: 00007ffdbb20c17f R14: 00007fe25c813300 R15: 0000000000022000 [ 561.505239] CPU: 0 PID: 1015 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 561.513787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.523143] Call Trace: [ 561.525746] dump_stack+0x1b2/0x281 17:31:51 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x0, 0x10000) [ 561.529378] should_fail.cold+0x10a/0x149 [ 561.533530] should_failslab+0xd6/0x130 [ 561.537508] __kmalloc+0x2c1/0x400 [ 561.541054] ? sk_prot_alloc+0x1ba/0x290 [ 561.545135] sk_prot_alloc+0x1ba/0x290 [ 561.549022] sk_alloc+0x36/0xcd0 [ 561.552392] __netlink_create+0x63/0x270 [ 561.556484] netlink_create+0x270/0x510 [ 561.560475] __sock_create+0x303/0x620 [ 561.564379] SyS_socket+0xd1/0x1b0 [ 561.567944] ? move_addr_to_kernel+0x60/0x60 [ 561.572371] ? __do_page_fault+0x159/0xad0 [ 561.576603] ? do_syscall_64+0x4c/0x640 [ 561.580577] ? move_addr_to_kernel+0x60/0x60 [ 561.584985] do_syscall_64+0x1d5/0x640 [ 561.588881] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.594074] RIP: 0033:0x467567 [ 561.597285] RSP: 002b:00007fb37a88e0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 561.604995] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 561.612267] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 561.619539] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 561.626809] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 561.634735] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 [ 561.642835] CPU: 1 PID: 1011 Comm: syz-executor.3 Not tainted 4.14.221-syzkaller #0 [ 561.650649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.660265] Call Trace: [ 561.662869] dump_stack+0x1b2/0x281 [ 561.666508] should_fail.cold+0x10a/0x149 [ 561.670667] should_failslab+0xd6/0x130 [ 561.674654] __kmalloc+0x2c1/0x400 [ 561.676207] socket: no more sockets [ 561.678234] ? sk_prot_alloc+0x1ba/0x290 [ 561.678257] sk_prot_alloc+0x1ba/0x290 [ 561.678269] sk_alloc+0x36/0xcd0 [ 561.678287] __netlink_create+0x63/0x270 [ 561.678299] netlink_create+0x270/0x510 [ 561.678315] __sock_create+0x303/0x620 [ 561.705139] SyS_socket+0xd1/0x1b0 [ 561.708687] ? move_addr_to_kernel+0x60/0x60 [ 561.713101] ? __do_page_fault+0x159/0xad0 [ 561.717339] ? do_syscall_64+0x4c/0x640 [ 561.721322] ? move_addr_to_kernel+0x60/0x60 [ 561.725733] do_syscall_64+0x1d5/0x640 [ 561.729624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.734808] RIP: 0033:0x467567 [ 561.737995] RSP: 002b:00007f8aa25510f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 561.745698] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 561.752963] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 561.760749] RBP: 00007f8aa25521d0 R08: 0000000000000000 R09: 0000000000000000 [ 561.768199] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 561.775481] R13: 00007fff7982e40f R14: 00007f8aa2552300 R15: 0000000000022000 [ 561.782769] CPU: 0 PID: 1024 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 561.790582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.799947] Call Trace: [ 561.802533] dump_stack+0x1b2/0x281 [ 561.806189] should_fail.cold+0x10a/0x149 [ 561.810335] should_failslab+0xd6/0x130 [ 561.814306] kmem_cache_alloc_trace+0x29a/0x3d0 [ 561.818987] sys_ioperm+0x29d/0x630 [ 561.822700] ? SyS_write+0x14d/0x210 [ 561.826505] ? profile_pc+0x120/0x120 [ 561.830308] ? __do_page_fault+0x159/0xad0 [ 561.834540] ? do_syscall_64+0x4c/0x640 [ 561.838495] ? profile_pc+0x120/0x120 [ 561.842288] do_syscall_64+0x1d5/0x640 [ 561.846164] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.851367] RIP: 0033:0x465ef9 [ 561.854543] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 561.862244] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 561.869698] RDX: 0000000000000001 RSI: 0000000000000100 RDI: 0000000000000000 [ 561.876975] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 17:31:52 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x0, 0x10000) 17:31:52 executing program 5 (fault-call:1 fault-nth:2): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:52 executing program 0 (fault-call:1 fault-nth:3): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:52 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) 17:31:52 executing program 3 (fault-call:1 fault-nth:3): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) [ 561.884259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.891549] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 17:31:52 executing program 4 (fault-call:0 fault-nth:1): ioperm(0x0, 0x100, 0x1) 17:31:52 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x0) [ 561.967730] FAULT_INJECTION: forcing a failure. [ 561.967730] name failslab, interval 1, probability 0, space 0, times 0 [ 561.993005] FAULT_INJECTION: forcing a failure. [ 561.993005] name failslab, interval 1, probability 0, space 0, times 0 [ 562.006868] FAULT_INJECTION: forcing a failure. [ 562.006868] name failslab, interval 1, probability 0, space 0, times 0 17:31:52 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000001c0)=0x681) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) [ 562.025850] FAULT_INJECTION: forcing a failure. [ 562.025850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 562.030897] CPU: 1 PID: 1040 Comm: syz-executor.5 Not tainted 4.14.221-syzkaller #0 [ 562.045599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.054948] Call Trace: [ 562.057549] dump_stack+0x1b2/0x281 [ 562.061178] should_fail.cold+0x10a/0x149 [ 562.065330] should_failslab+0xd6/0x130 [ 562.069305] __kmalloc+0x2c1/0x400 [ 562.072837] ? sk_prot_alloc+0x1ba/0x290 [ 562.076911] sk_prot_alloc+0x1ba/0x290 [ 562.080790] sk_alloc+0x36/0xcd0 [ 562.084159] __netlink_create+0x63/0x270 [ 562.088220] netlink_create+0x270/0x510 [ 562.092201] __sock_create+0x303/0x620 [ 562.096082] SyS_socket+0xd1/0x1b0 [ 562.099622] ? move_addr_to_kernel+0x60/0x60 [ 562.104016] ? __do_page_fault+0x159/0xad0 [ 562.108245] ? do_syscall_64+0x4c/0x640 [ 562.112240] ? move_addr_to_kernel+0x60/0x60 [ 562.116646] do_syscall_64+0x1d5/0x640 [ 562.120537] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 562.125722] RIP: 0033:0x467567 [ 562.128911] RSP: 002b:00007fe25c8120f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 562.136616] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 562.143896] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 562.151173] RBP: 00007fe25c8131d0 R08: 0000000000000000 R09: 0000000000000000 [ 562.158450] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 562.165736] R13: 00007ffdbb20c17f R14: 00007fe25c813300 R15: 0000000000022000 [ 562.173033] CPU: 0 PID: 1048 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 562.180839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.190393] Call Trace: [ 562.192988] dump_stack+0x1b2/0x281 [ 562.196640] should_fail.cold+0x10a/0x149 [ 562.200792] __alloc_pages_nodemask+0x22c/0x2720 [ 562.205565] ? _copy_from_user+0x96/0x100 [ 562.209717] ? __lock_acquire+0x5fc/0x3f20 [ 562.213969] ? lock_downgrade+0x740/0x740 [ 562.218140] ? gfp_pfmemalloc_allowed+0x150/0x150 17:31:52 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x0) 17:31:52 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x0) [ 562.223509] ? get_pid_task+0xb8/0x130 [ 562.227430] ? fsnotify+0x974/0x11b0 [ 562.231146] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 562.236089] ? SyS_write+0x1b7/0x210 [ 562.239819] cache_grow_begin+0x91/0x630 [ 562.243894] ? check_preemption_disabled+0x35/0x240 [ 562.249043] cache_alloc_refill+0x273/0x350 [ 562.253385] kmem_cache_alloc_trace+0x340/0x3d0 [ 562.258065] sys_ioperm+0x29d/0x630 [ 562.261718] ? SyS_write+0x14d/0x210 [ 562.265455] ? profile_pc+0x120/0x120 [ 562.269261] ? __do_page_fault+0x159/0xad0 [ 562.273500] ? do_syscall_64+0x4c/0x640 [ 562.277562] ? profile_pc+0x120/0x120 [ 562.281369] do_syscall_64+0x1d5/0x640 [ 562.285269] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 562.290555] RIP: 0033:0x465ef9 [ 562.293740] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 562.301593] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 562.308949] RDX: 0000000000000001 RSI: 0000000000000100 RDI: 0000000000000000 [ 562.316220] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 [ 562.328980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.337124] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 [ 562.344412] CPU: 1 PID: 1042 Comm: syz-executor.3 Not tainted 4.14.221-syzkaller #0 [ 562.352225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.361587] Call Trace: [ 562.364187] dump_stack+0x1b2/0x281 [ 562.367832] should_fail.cold+0x10a/0x149 [ 562.371987] should_failslab+0xd6/0x130 [ 562.375967] kmem_cache_alloc+0x28e/0x3c0 [ 562.380151] __d_alloc+0x2a/0xa20 [ 562.383616] sock_alloc_file+0xc8/0x2e0 [ 562.387604] ? sock_poll+0x220/0x220 [ 562.391368] SyS_socket+0x108/0x1b0 [ 562.395001] ? move_addr_to_kernel+0x60/0x60 [ 562.399446] ? __do_page_fault+0x159/0xad0 [ 562.403682] ? do_syscall_64+0x4c/0x640 [ 562.407659] ? move_addr_to_kernel+0x60/0x60 [ 562.412075] do_syscall_64+0x1d5/0x640 [ 562.415972] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 562.421158] RIP: 0033:0x467567 17:31:52 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f00000001c0)=0x681) [ 562.424346] RSP: 002b:00007f8aa25510f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 562.432056] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 562.439328] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 562.446623] RBP: 00007f8aa25521d0 R08: 0000000000000000 R09: 0000000000000000 [ 562.453899] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 562.461174] R13: 00007fff7982e40f R14: 00007f8aa2552300 R15: 0000000000022000 [ 562.482040] CPU: 1 PID: 1041 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 562.489876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.499232] Call Trace: [ 562.501829] dump_stack+0x1b2/0x281 [ 562.505474] should_fail.cold+0x10a/0x149 [ 562.509656] should_failslab+0xd6/0x130 [ 562.513824] kmem_cache_alloc+0x28e/0x3c0 [ 562.517990] __d_alloc+0x2a/0xa20 [ 562.521454] sock_alloc_file+0xc8/0x2e0 [ 562.525442] ? sock_poll+0x220/0x220 17:31:52 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) [ 562.529176] SyS_socket+0x108/0x1b0 [ 562.532812] ? move_addr_to_kernel+0x60/0x60 [ 562.537223] ? __do_page_fault+0x159/0xad0 [ 562.541461] ? do_syscall_64+0x4c/0x640 [ 562.545441] ? move_addr_to_kernel+0x60/0x60 [ 562.549871] do_syscall_64+0x1d5/0x640 [ 562.553775] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 562.558980] RIP: 0033:0x467567 [ 562.562197] RSP: 002b:00007fb37a88e0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 562.569915] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 562.577205] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 562.584479] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 562.591754] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 562.599029] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 17:31:52 executing program 0 (fault-call:1 fault-nth:4): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:52 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:52 executing program 4 (fault-call:0 fault-nth:2): ioperm(0x0, 0x100, 0x1) 17:31:52 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:31:52 executing program 3 (fault-call:1 fault-nth:4): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:52 executing program 5 (fault-call:1 fault-nth:3): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:52 executing program 4: r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x8, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80200, 0x0) ioperm(0x0, 0x100, 0x1) r2 = getgid() ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) getgroups(0x2, &(0x7f0000000100)=[r2, r3]) 17:31:52 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) [ 562.700962] FAULT_INJECTION: forcing a failure. [ 562.700962] name failslab, interval 1, probability 0, space 0, times 0 [ 562.705048] FAULT_INJECTION: forcing a failure. [ 562.705048] name failslab, interval 1, probability 0, space 0, times 0 [ 562.714063] FAULT_INJECTION: forcing a failure. [ 562.714063] name failslab, interval 1, probability 0, space 0, times 0 17:31:52 executing program 1 (fault-call:1 fault-nth:0): ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) [ 562.772633] CPU: 0 PID: 1081 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 562.781431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.793583] Call Trace: [ 562.796177] dump_stack+0x1b2/0x281 [ 562.799817] should_fail.cold+0x10a/0x149 [ 562.803985] should_failslab+0xd6/0x130 [ 562.807978] kmem_cache_alloc+0x28e/0x3c0 [ 562.812139] get_empty_filp+0x86/0x3e0 [ 562.816057] alloc_file+0x23/0x440 [ 562.819758] sock_alloc_file+0x113/0x2e0 [ 562.823840] ? sock_poll+0x220/0x220 [ 562.827653] SyS_socket+0x108/0x1b0 [ 562.831286] ? move_addr_to_kernel+0x60/0x60 [ 562.835890] ? __do_page_fault+0x159/0xad0 [ 562.840395] ? do_syscall_64+0x4c/0x640 [ 562.845430] ? move_addr_to_kernel+0x60/0x60 [ 562.849855] do_syscall_64+0x1d5/0x640 [ 562.855951] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 562.861137] RIP: 0033:0x467567 [ 562.864326] RSP: 002b:00007fb37a88e0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 17:31:53 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) time(&(0x7f0000000080)) keyctl$clear(0x7, r0) [ 562.872033] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 562.879309] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 562.886604] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 562.893884] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 562.901161] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 [ 562.932270] CPU: 1 PID: 1082 Comm: syz-executor.5 Not tainted 4.14.221-syzkaller #0 [ 562.940102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.949452] Call Trace: [ 562.952038] dump_stack+0x1b2/0x281 [ 562.955674] should_fail.cold+0x10a/0x149 [ 562.959912] should_failslab+0xd6/0x130 [ 562.963885] kmem_cache_alloc+0x28e/0x3c0 [ 562.968028] __d_alloc+0x2a/0xa20 [ 562.971565] sock_alloc_file+0xc8/0x2e0 [ 562.975533] ? sock_poll+0x220/0x220 [ 562.979244] SyS_socket+0x108/0x1b0 [ 562.982875] ? move_addr_to_kernel+0x60/0x60 [ 562.987280] ? __do_page_fault+0x159/0xad0 [ 562.991526] ? do_syscall_64+0x4c/0x640 [ 562.995494] ? move_addr_to_kernel+0x60/0x60 [ 562.999893] do_syscall_64+0x1d5/0x640 [ 563.003788] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 563.008969] RIP: 0033:0x467567 [ 563.012145] RSP: 002b:00007fe25c8120f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 563.019890] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 17:31:53 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x1f, 0x10000, 0x6) ioperm(0x0, 0x43, 0x10000) [ 563.027163] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 563.034425] RBP: 00007fe25c8131d0 R08: 0000000000000000 R09: 0000000000000000 [ 563.041688] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 563.048950] R13: 00007ffdbb20c17f R14: 00007fe25c813300 R15: 0000000000022000 [ 563.056233] CPU: 0 PID: 1079 Comm: syz-executor.3 Not tainted 4.14.221-syzkaller #0 [ 563.064048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.073417] Call Trace: [ 563.076016] dump_stack+0x1b2/0x281 [ 563.079663] should_fail.cold+0x10a/0x149 [ 563.084002] should_failslab+0xd6/0x130 [ 563.087983] kmem_cache_alloc+0x28e/0x3c0 [ 563.092140] get_empty_filp+0x86/0x3e0 [ 563.096034] alloc_file+0x23/0x440 [ 563.099577] sock_alloc_file+0x113/0x2e0 [ 563.103636] ? sock_poll+0x220/0x220 [ 563.107361] SyS_socket+0x108/0x1b0 [ 563.110993] ? move_addr_to_kernel+0x60/0x60 [ 563.115408] ? __do_page_fault+0x159/0xad0 [ 563.119649] ? do_syscall_64+0x4c/0x640 [ 563.123622] ? move_addr_to_kernel+0x60/0x60 [ 563.128032] do_syscall_64+0x1d5/0x640 17:31:53 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x2) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) [ 563.131930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 563.137124] RIP: 0033:0x467567 [ 563.140315] RSP: 002b:00007f8aa25510f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 563.148037] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 563.155309] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 563.162605] RBP: 00007f8aa25521d0 R08: 0000000000000000 R09: 0000000000000000 [ 563.169878] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 563.177170] R13: 00007fff7982e40f R14: 00007f8aa2552300 R15: 0000000000022000 17:31:53 executing program 0 (fault-call:1 fault-nth:5): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:53 executing program 1: ioperm(0x195, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) 17:31:53 executing program 5 (fault-call:1 fault-nth:4): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:53 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) 17:31:53 executing program 3 (fault-call:1 fault-nth:5): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:53 executing program 4: ioperm(0x1000, 0x9, 0xfffffffffffffffd) 17:31:53 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:53 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) socket$inet6(0xa, 0x5, 0x9) [ 563.276459] FAULT_INJECTION: forcing a failure. [ 563.276459] name failslab, interval 1, probability 0, space 0, times 0 [ 563.301181] FAULT_INJECTION: forcing a failure. [ 563.301181] name failslab, interval 1, probability 0, space 0, times 0 [ 563.315707] FAULT_INJECTION: forcing a failure. [ 563.315707] name failslab, interval 1, probability 0, space 0, times 0 17:31:53 executing program 4: ioperm(0x6, 0x101, 0x1) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="ca1b0e36ec626845852dfddb76aca9f1f1bdb746f50ec5b10b88981792272292914438dfc21a9430ec670960289b51088c420b8677090000008d0f235ba2000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000"], 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x220080c0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00', r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x68, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x79fa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xea70}]}, 0x68}}, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff00000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x713}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) [ 563.329256] CPU: 0 PID: 1119 Comm: syz-executor.5 Not tainted 4.14.221-syzkaller #0 [ 563.337071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.346430] Call Trace: [ 563.349038] dump_stack+0x1b2/0x281 [ 563.352670] should_fail.cold+0x10a/0x149 [ 563.356826] should_failslab+0xd6/0x130 [ 563.360828] kmem_cache_alloc+0x28e/0x3c0 [ 563.364993] get_empty_filp+0x86/0x3e0 [ 563.368884] alloc_file+0x23/0x440 [ 563.372428] sock_alloc_file+0x113/0x2e0 [ 563.376500] ? sock_poll+0x220/0x220 [ 563.380229] SyS_socket+0x108/0x1b0 [ 563.383868] ? move_addr_to_kernel+0x60/0x60 [ 563.388283] ? __do_page_fault+0x159/0xad0 [ 563.392608] ? do_syscall_64+0x4c/0x640 [ 563.396588] ? move_addr_to_kernel+0x60/0x60 [ 563.401002] do_syscall_64+0x1d5/0x640 [ 563.404903] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 563.410188] RIP: 0033:0x467567 [ 563.413372] RSP: 002b:00007fe25c8120f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 563.421090] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 563.431834] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 563.439104] RBP: 00007fe25c8131d0 R08: 0000000000000000 R09: 0000000000000000 [ 563.446374] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 563.453653] R13: 00007ffdbb20c17f R14: 00007fe25c813300 R15: 0000000000022000 [ 563.464653] CPU: 1 PID: 1122 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 563.472598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.481958] Call Trace: [ 563.484556] dump_stack+0x1b2/0x281 [ 563.488620] should_fail.cold+0x10a/0x149 [ 563.492875] should_failslab+0xd6/0x130 [ 563.496959] kmem_cache_alloc_trace+0x29a/0x3d0 [ 563.501632] apparmor_file_alloc_security+0x129/0x800 [ 563.507102] security_file_alloc+0x66/0xa0 [ 563.511358] ? selinux_is_enabled+0x5/0x50 [ 563.515605] get_empty_filp+0x15c/0x3e0 [ 563.519583] alloc_file+0x23/0x440 [ 563.523133] sock_alloc_file+0x113/0x2e0 [ 563.527192] ? sock_poll+0x220/0x220 [ 563.530908] SyS_socket+0x108/0x1b0 [ 563.534527] ? move_addr_to_kernel+0x60/0x60 [ 563.538935] ? __do_page_fault+0x159/0xad0 [ 563.543164] ? do_syscall_64+0x4c/0x640 [ 563.547221] ? move_addr_to_kernel+0x60/0x60 [ 563.551632] do_syscall_64+0x1d5/0x640 [ 563.555527] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 563.560719] RIP: 0033:0x467567 [ 563.563903] RSP: 002b:00007fb37a88e0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 563.571612] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 17:31:53 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) [ 563.578890] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 563.586165] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 563.593439] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 563.600715] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 [ 563.608028] CPU: 0 PID: 1125 Comm: syz-executor.3 Not tainted 4.14.221-syzkaller #0 [ 563.615842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.625275] Call Trace: 17:31:53 executing program 4: ioperm(0x0, 0x100, 0x1) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/30, &(0x7f0000000040)=0x1e) [ 563.627888] dump_stack+0x1b2/0x281 [ 563.631545] should_fail.cold+0x10a/0x149 [ 563.635699] should_failslab+0xd6/0x130 [ 563.639684] kmem_cache_alloc_trace+0x29a/0x3d0 [ 563.644406] apparmor_file_alloc_security+0x129/0x800 [ 563.649730] security_file_alloc+0x66/0xa0 [ 563.653984] ? selinux_is_enabled+0x5/0x50 [ 563.658241] get_empty_filp+0x15c/0x3e0 [ 563.662227] alloc_file+0x23/0x440 [ 563.665774] sock_alloc_file+0x113/0x2e0 [ 563.669844] ? sock_poll+0x220/0x220 [ 563.673568] SyS_socket+0x108/0x1b0 17:31:53 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) [ 563.677398] ? move_addr_to_kernel+0x60/0x60 [ 563.681897] ? __do_page_fault+0x159/0xad0 [ 563.686147] ? do_syscall_64+0x4c/0x640 [ 563.690254] ? move_addr_to_kernel+0x60/0x60 [ 563.694671] do_syscall_64+0x1d5/0x640 [ 563.698568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 563.703762] RIP: 0033:0x467567 [ 563.706949] RSP: 002b:00007f8aa25510f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 563.714662] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 563.721935] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 17:31:53 executing program 0 (fault-call:1 fault-nth:6): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:53 executing program 4: ioperm(0x0, 0x100, 0x1) prctl$PR_GET_SECCOMP(0x15) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000040)=0x2) r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20040, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) [ 563.729203] RBP: 00007f8aa25521d0 R08: 0000000000000000 R09: 0000000000000000 [ 563.736483] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 563.743755] R13: 00007fff7982e40f R14: 00007f8aa2552300 R15: 0000000000022000 [ 563.828286] FAULT_INJECTION: forcing a failure. [ 563.828286] name failslab, interval 1, probability 0, space 0, times 0 [ 563.856288] CPU: 0 PID: 1158 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 563.864153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.873520] Call Trace: 17:31:54 executing program 5 (fault-call:1 fault-nth:5): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:54 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:54 executing program 1: ioperm(0x0, 0x100, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioperm(0x0, 0x43, 0x10000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000040)={0x0, {0x3, 0x80000001}}) 17:31:54 executing program 4: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000080)={0x8, 0x2, 0x5, {0x10001, 0x7, 0xffff, 0x3dd}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) 17:31:54 executing program 3 (fault-call:1 fault-nth:6): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) [ 563.876120] dump_stack+0x1b2/0x281 [ 563.880031] should_fail.cold+0x10a/0x149 [ 563.884279] should_failslab+0xd6/0x130 [ 563.888268] kmem_cache_alloc_node+0x263/0x410 [ 563.892864] __alloc_skb+0x5c/0x510 [ 563.896511] netlink_sendmsg+0x901/0xb80 [ 563.900592] ? nlmsg_notify+0x170/0x170 [ 563.904602] ? security_socket_sendmsg+0x83/0xb0 [ 563.909364] ? nlmsg_notify+0x170/0x170 [ 563.913350] sock_sendmsg+0xb5/0x100 [ 563.917078] SyS_sendto+0x1c7/0x2c0 [ 563.920766] ? SyS_getpeername+0x220/0x220 [ 563.925023] ? sock_poll+0x220/0x220 [ 563.929012] ? SyS_socket+0x12f/0x1b0 [ 563.932825] ? move_addr_to_kernel+0x60/0x60 [ 563.938458] ? __do_page_fault+0x159/0xad0 [ 563.942788] ? do_syscall_64+0x4c/0x640 [ 563.946779] ? SyS_getpeername+0x220/0x220 [ 563.951023] do_syscall_64+0x1d5/0x640 [ 563.955083] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 563.960277] RIP: 0033:0x41938c [ 563.963473] RSP: 002b:00007fb37a88e020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 563.971190] RAX: ffffffffffffffda RBX: 00007fb37a88e110 RCX: 000000000041938c 17:31:54 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) [ 563.978464] RDX: 000000000000001c RSI: 00007fb37a88e160 RDI: 0000000000000005 [ 563.985745] RBP: 0000000000000000 R08: 00007fb37a88e074 R09: 000000000000000c [ 563.993110] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fb37a88e0c8 [ 564.000380] R13: 00007fb37a88e160 R14: 0000000000000005 R15: 0000000000000000 [ 564.006176] FAULT_INJECTION: forcing a failure. [ 564.006176] name failslab, interval 1, probability 0, space 0, times 0 [ 564.051895] FAULT_INJECTION: forcing a failure. [ 564.051895] name failslab, interval 1, probability 0, space 0, times 0 [ 564.056868] CPU: 1 PID: 1173 Comm: syz-executor.3 Not tainted 4.14.221-syzkaller #0 [ 564.070931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.080304] Call Trace: [ 564.082914] dump_stack+0x1b2/0x281 [ 564.086539] should_fail.cold+0x10a/0x149 [ 564.090706] should_failslab+0xd6/0x130 [ 564.094679] kmem_cache_alloc_node+0x263/0x410 [ 564.099256] __alloc_skb+0x5c/0x510 [ 564.102881] netlink_sendmsg+0x901/0xb80 [ 564.107036] ? nlmsg_notify+0x170/0x170 [ 564.111008] ? security_socket_sendmsg+0x83/0xb0 [ 564.115758] ? nlmsg_notify+0x170/0x170 [ 564.119726] sock_sendmsg+0xb5/0x100 [ 564.123462] SyS_sendto+0x1c7/0x2c0 [ 564.127118] ? SyS_getpeername+0x220/0x220 [ 564.131366] ? sock_poll+0x220/0x220 [ 564.135085] ? SyS_socket+0x12f/0x1b0 [ 564.138903] ? move_addr_to_kernel+0x60/0x60 [ 564.143308] ? __do_page_fault+0x159/0xad0 [ 564.147539] ? do_syscall_64+0x4c/0x640 [ 564.151524] ? SyS_getpeername+0x220/0x220 [ 564.155752] do_syscall_64+0x1d5/0x640 [ 564.159637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 564.164909] RIP: 0033:0x41938c [ 564.168090] RSP: 002b:00007f8aa2551020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 564.176141] RAX: ffffffffffffffda RBX: 00007f8aa2551110 RCX: 000000000041938c [ 564.183408] RDX: 000000000000001c RSI: 00007f8aa2551160 RDI: 0000000000000005 [ 564.190850] RBP: 0000000000000000 R08: 00007f8aa2551074 R09: 000000000000000c 17:31:54 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x315540) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) 17:31:54 executing program 0: socket$packet(0x11, 0x3, 0x300) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) [ 564.198116] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8aa25510c8 [ 564.205380] R13: 00007f8aa2551160 R14: 0000000000000005 R15: 0000000000000000 [ 564.226920] CPU: 0 PID: 1177 Comm: syz-executor.5 Not tainted 4.14.221-syzkaller #0 [ 564.234753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.244136] Call Trace: [ 564.246744] dump_stack+0x1b2/0x281 17:31:54 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x101) [ 564.250393] should_fail.cold+0x10a/0x149 [ 564.254563] should_failslab+0xd6/0x130 [ 564.258552] kmem_cache_alloc_trace+0x29a/0x3d0 [ 564.263231] apparmor_file_alloc_security+0x129/0x800 [ 564.268435] security_file_alloc+0x66/0xa0 [ 564.272681] ? selinux_is_enabled+0x5/0x50 [ 564.276928] get_empty_filp+0x15c/0x3e0 [ 564.280914] alloc_file+0x23/0x440 [ 564.284474] sock_alloc_file+0x113/0x2e0 [ 564.288544] ? sock_poll+0x220/0x220 [ 564.292268] SyS_socket+0x108/0x1b0 [ 564.295897] ? move_addr_to_kernel+0x60/0x60 17:31:54 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101) [ 564.300307] ? __do_page_fault+0x159/0xad0 [ 564.304555] ? do_syscall_64+0x4c/0x640 [ 564.308529] ? move_addr_to_kernel+0x60/0x60 [ 564.312969] do_syscall_64+0x1d5/0x640 [ 564.316889] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 564.322083] RIP: 0033:0x467567 [ 564.325271] RSP: 002b:00007fe25c8120f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 564.332986] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467567 [ 564.340261] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 17:31:54 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101) 17:31:54 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xc350a047b3b52245, 0x0) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x40100) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000040)={0x34}) ioperm(0xfffffffffffffffe, 0xb229, 0x1) 17:31:54 executing program 5 (fault-call:1 fault-nth:6): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:54 executing program 1: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x110) ioperm(0x0, 0x100, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x1, 0x1, @raw_data=[0x55, 0x2, 0x6eab, 0x9, 0x9, 0x0, 0x915f, 0x8, 0x8, 0x1, 0x7f, 0x29, 0x1f, 0x4, 0xd6, 0x8]}) ioperm(0x0, 0x43, 0x10000) 17:31:54 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/142, &(0x7f00000000c0)=0x8e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) [ 564.347535] RBP: 00007fe25c8131d0 R08: 0000000000000000 R09: 0000000000000000 [ 564.354843] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000ffffffff [ 564.362130] R13: 00007ffdbb20c17f R14: 00007fe25c813300 R15: 0000000000022000 17:31:54 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101) 17:31:54 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x206c, &(0x7f0000000180)=[{0x7, 0x20, 0x7, 0x10001}, {0x7f, 0x9, 0x4, 0x8}, {0x3, 0x40, 0x1f, 0x9}, {0x8000, 0x1f, 0x84, 0x101}, {0x0, 0x1, 0x5, 0x2}, {0x346, 0x40, 0x6, 0x77a2}, {0x4, 0x20, 0x7f, 0x3}]}) 17:31:54 executing program 0: ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 564.446984] FAULT_INJECTION: forcing a failure. [ 564.446984] name failslab, interval 1, probability 0, space 0, times 0 17:31:54 executing program 4: ioperm(0x0, 0x100, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) [ 564.525519] CPU: 1 PID: 1203 Comm: syz-executor.5 Not tainted 4.14.221-syzkaller #0 [ 564.533358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.542723] Call Trace: [ 564.545342] dump_stack+0x1b2/0x281 [ 564.548976] should_fail.cold+0x10a/0x149 [ 564.553134] should_failslab+0xd6/0x130 [ 564.557115] kmem_cache_alloc_node+0x263/0x410 [ 564.561739] __alloc_skb+0x5c/0x510 [ 564.565374] netlink_sendmsg+0x901/0xb80 [ 564.569447] ? nlmsg_notify+0x170/0x170 [ 564.573870] ? security_socket_sendmsg+0x83/0xb0 [ 564.578627] ? nlmsg_notify+0x170/0x170 [ 564.582607] sock_sendmsg+0xb5/0x100 [ 564.586325] SyS_sendto+0x1c7/0x2c0 [ 564.589957] ? SyS_getpeername+0x220/0x220 [ 564.594203] ? sock_poll+0x220/0x220 [ 564.597937] ? SyS_socket+0x12f/0x1b0 [ 564.601741] ? move_addr_to_kernel+0x60/0x60 [ 564.606162] ? __do_page_fault+0x159/0xad0 [ 564.610411] ? do_syscall_64+0x4c/0x640 [ 564.614395] ? SyS_getpeername+0x220/0x220 [ 564.618641] do_syscall_64+0x1d5/0x640 [ 564.622546] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 564.627743] RIP: 0033:0x41938c [ 564.630938] RSP: 002b:00007fe25c812020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 564.638651] RAX: ffffffffffffffda RBX: 00007fe25c812110 RCX: 000000000041938c [ 564.646386] RDX: 000000000000001c RSI: 00007fe25c812160 RDI: 0000000000000005 [ 564.656708] RBP: 0000000000000000 R08: 00007fe25c812074 R09: 000000000000000c [ 564.663989] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe25c8120c8 17:31:54 executing program 4: ioperm(0x0, 0x100, 0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) ioperm(0x80000001, 0x7, 0x100000000) 17:31:54 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) 17:31:54 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioperm(0x101, 0xfffffffffffffffa, 0x3ff) r1 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, 0x0) ptrace$setregset(0x4205, r1, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="0bbd4b8babf8bf7d4e2adc13e07d11eae628ea2719bcc1b9c30c1dabc13b6da4055ba7e2887436c44ddbc0be4544d337a457ac0c7c0df4606bb49b4b22c63455fa0e02928107edb4e16c26bb6b87960a57c82610e8c1b94eada3a3b54105a67f13e1ed774522a17ca7", 0x69}) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000040)={"ba3ae6b9ebd3965f9fa0561b7005e696a07588be27521ba4107d9b7eb188", 0x7fff, 0x2, 0x0, 0x6c, 0x8, 0x5, 0xfff, 0x1, [0x200, 0x4, 0x4, 0x2, 0x1000, 0x7, 0xb55, 0x0, 0x488, 0x4, 0x9c, 0x9, 0x8000, 0x10000, 0x6, 0x5a5f, 0x8, 0x4c, 0x9]}) [ 564.671354] R13: 00007fe25c812160 R14: 0000000000000005 R15: 0000000000000000 17:31:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) fstat(r0, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r2) 17:31:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x3, 0xffff, 0x0, 0x88, 0xffffffffffffffff, 0x400, [], 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r2 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x6, 0x10000) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map={0x18, 0x7, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x3, 0x2, 0x0, 0x2, 0x4f116532c9d87182, 0xfffffffffffffffe, 0xfffffffffffffffc}, @generic={0x6, 0x2, 0x4, 0x3, 0x7fff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x362d, 0xff, &(0x7f0000000100)=""/255, 0x41000, 0x0, [], r1, 0x0, r2, 0x8, &(0x7f00000002c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x0, 0x800, 0xffffffc1}, 0x10, 0x5175, r3}, 0x78) 17:31:54 executing program 5: futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) 17:31:54 executing program 1: ioperm(0x0, 0x100, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x6, {0xfffeffff, 0x6, 0x7, 0x1}}) ioperm(0x0, 0x1, 0x10000) 17:31:54 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0x9, 0x2c07, 0x81, 0x0, 0xffffffffffffffff, 0x6, [], r1, r2, 0x5, 0x1, 0x5}, 0x40) 17:31:54 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = getpgid(0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x4}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x8) 17:31:54 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) 17:31:54 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x5, 0x68e402) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)=0x9) 17:31:55 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x7ff, "05d1d7b3308dae4f0c2b3b41598e67cd73718cb0671ab4480dfa87157612ebd2", 0x2, 0x1}) 17:31:55 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) 17:31:55 executing program 4: ioperm(0xffff, 0x101, 0x2) ioperm(0x39f, 0x10001, 0x4) 17:31:55 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:31:55 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:55 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x3, 0x10000) 17:31:55 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:55 executing program 4: ioperm(0x100, 0x100, 0x1000000004) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) 17:31:55 executing program 2: ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 17:31:55 executing program 1: syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x10100) ioperm(0x0, 0x100, 0x0) ioperm(0x20000000000000, 0x43, 0x10000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x6, 0x7, [], &(0x7f00000000c0)=0x6}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0xc, {0x80000000, 0x80000000, 0x3ff, 0x6}}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000001c0)={0x8000, "3d91037abfb8e786c137d9fd3eef86eb39682c12de277bcba4abb0433c16fc8b", 0x3, 0xc53, 0x3, 0xe0, 0x5000020, 0x2}) ioperm(0x517eca2, 0x7, 0xe7b) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0x2, {0x9, 0x9, 0x2, 0x216}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 17:31:55 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x6fd, 0xff, 0x800, 0x8}}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:55 executing program 5: prctl$PR_GET_SECCOMP(0x15) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) 17:31:55 executing program 4: ioperm(0x1, 0x6, 0x1ffffffffffffe) 17:31:55 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:31:55 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:31:55 executing program 4: ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0x3, "d479928bde3513d903e446de271b6cbe4ee79867b2a4b30b713db2f39d476748", 0x1}) ioperm(0x100000000000000, 0xd0b, 0x5) 17:31:55 executing program 1: ioperm(0x3f, 0x100, 0x0) ioperm(0x9b68, 0x7, 0x1200007fffffff) modify_ldt$read(0x0, &(0x7f0000000000)=""/95, 0x5f) ioperm(0x0, 0x43, 0x10000) 17:31:55 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) [ 565.169945] nbd: must specify a device to reconfigure 17:31:55 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x206c, &(0x7f0000000180)=[{0x7, 0x20, 0x7, 0x10001}, {0x7f, 0x9, 0x4, 0x8}, {0x3, 0x40, 0x1f, 0x9}, {0x8000, 0x1f, 0x84, 0x101}, {0x0, 0x1, 0x5, 0x2}, {0x346, 0x40, 0x6, 0x77a2}, {0x4, 0x20, 0x7f, 0x3}]}) 17:31:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:55 executing program 4: ioperm(0xfffffffffffffffb, 0xe2, 0x1dbb) [ 565.259132] nbd: must specify a device to reconfigure 17:31:55 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x206c, &(0x7f0000000180)=[{0x7, 0x20, 0x7, 0x10001}, {0x7f, 0x9, 0x4, 0x8}, {0x3, 0x40, 0x1f, 0x9}, {0x8000, 0x1f, 0x84, 0x101}, {0x0, 0x1, 0x5, 0x2}, {0x346, 0x40, 0x6, 0x77a2}, {0x4, 0x20, 0x7f, 0x3}]}) 17:31:55 executing program 4: ioperm(0x0, 0x100, 0x8000) shmget(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) 17:31:55 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x1c, 0x1d8, 0x6, 0x2}}) socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_SECCOMP(0x15) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ptrace$cont(0x7, 0xffffffffffffffff, 0x3, 0x1) 17:31:55 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000000)={0x2, {0x1, 0x9, 0x3ec, 0x28}}) 17:31:55 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x800000000000002, 0x7fd, 0x1f42) ioperm(0x0, 0x43, 0x10000) ioperm(0x2, 0x9, 0x7) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) 17:31:55 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getpgrp(0xffffffffffffffff) 17:31:55 executing program 4: ioperm(0x0, 0xfe, 0x7) 17:31:55 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x206c, &(0x7f0000000180)=[{0x7, 0x20, 0x7, 0x10001}, {0x7f, 0x9, 0x4, 0x8}, {0x3, 0x40, 0x1f, 0x9}, {0x8000, 0x1f, 0x84, 0x101}, {0x0, 0x1, 0x5, 0x2}, {0x346, 0x40, 0x6, 0x77a2}, {0x4, 0x20, 0x7f, 0x3}]}) 17:31:55 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x84000) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:31:55 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', r0) 17:31:55 executing program 5: ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000180)={0x3, 0x0, [0x4, 0x7ff, 0x8, 0x5, 0x9, 0x4, 0x3, 0x4a75]}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x400007, &(0x7f0000000000)) lookup_dcookie(0x400000ff, &(0x7f0000000380)=""/184, 0xb8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)='+\'\\.\x00'}, 0x30) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @private}, &(0x7f00000001c0)=0xc) 17:31:55 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) 17:31:55 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x3fe, 0x67a, 0x8, 0x280, r1, 0x7ff, [], r4, 0xffffffffffffffff, 0xfffffffe, 0x4, 0x6}, 0x40) 17:31:55 executing program 5: socket$packet(0x11, 0x3, 0x300) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:55 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:31:55 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x5, 0x4, 0x6) ioperm(0x0, 0x43, 0x10000) ioperm(0x5, 0x9, 0x6) ioperm(0x3, 0x1f, 0x8) 17:31:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:55 executing program 3: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x28) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) socket$packet(0x11, 0x3, 0x300) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000300)=[0x0, r2, r3, r4, 0xee00, 0xffffffffffffffff]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000000c0)={{0x3, 0x0, 0x40, 0x1, 0xc6}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:55 executing program 4: ioperm(0x0, 0x100, 0xffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x5, {0x2, 0x21, 0x6, 0x100}}) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) 17:31:55 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:31:55 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x40000) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:31:55 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x1, 0x44, 0x10000) ioperm(0x4, 0x1, 0x1000000) socket$inet6(0xa, 0x3, 0x8) 17:31:55 executing program 0: getgroups(0x6, &(0x7f0000000000)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01, 0x0]) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:55 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:55 executing program 4: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) ioperm(0x1ff, 0x96e6, 0x9) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="6520feff090000004d292500e8ffffff1814000038cb0556788de988bd890d862da3357cb7196b5cd58ba9b7861ebe672338ff38b9d88a34b909f023cc97f2a4fd4a25a060cd8ea4554a67e03567d197bbac6355667523c0b671232603d00dbf3f", @ANYRES32=r1, @ANYBLOB="00000000000000002f853000ffffffff8577feffffffffff"], &(0x7f00000003c0)='GPL\x00', 0x3, 0xd7, &(0x7f0000000400)=""/215, 0x40f00, 0x9, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x2, 0xcf}, 0x10, 0x26bc9, r3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r4}, 0x10) 17:31:55 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24044084}, 0x4000) 17:31:55 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x4, 0xa4000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000100)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @loopback}, &(0x7f0000000080)=0xc) 17:31:55 executing program 5: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x204) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x200}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r1) 17:31:55 executing program 1: ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f00000000c0)={0x7, "8cbbf3e8465448c59951fd76454a869bb8d3c9b164afbb91d71726f85226b389", 0x1, 0x1}) ioperm(0x0, 0x100, 0x0) ioperm(0x98, 0x2, 0x1) ioperm(0x0, 0x43, 0x10000) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x3, "8153b60e3891ec4d07238cf906572770b3377e08c7e4bdd96eddd448bfb35be8", 0x3, 0x7ff, 0x3, 0x0, 0x1040000, 0x2}) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 17:31:55 executing program 4: ioperm(0x7, 0x100000000, 0x1) ioperm(0x100, 0x21, 0x7) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 17:31:55 executing program 3: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) 17:31:55 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) 17:31:56 executing program 0: shmget(0x1, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 1: ioperm(0xdb9, 0x100, 0x4) waitid(0x3, 0x0, 0x0, 0x2, 0x0) ioperm(0x0, 0x43, 0x10000) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) 17:31:56 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioperm(0xfff, 0x200, 0x6) ioperm(0x8, 0x6, 0x8) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 17:31:56 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) fstat(r0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc03, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000040)=""/185) 17:31:56 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:31:56 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) 17:31:56 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x3, 0x10001, 0x8a4) 17:31:56 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3f, 0xc8, 0x8, 0xd8, "4e1b1f1ab8ebcdba"}}}, 0x10) ioperm(0x0, 0x100, 0x1) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x10001, 0x0, [], {0x0, @bt={0x1, 0x15a, 0x1, 0x1, 0x0, 0x80000000, 0x3ff, 0x3ff0, 0x8000, 0x6, 0x0, 0x8, 0x5a58, 0x520cd628, 0x2, 0x1d, {0x0, 0x5}, 0x5, 0x3}}}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000100)={0x0, @ctrl}) 17:31:56 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) 17:31:56 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'macvlan0\x00'}) 17:31:56 executing program 1: ioperm(0x80000d, 0x41b, 0xffff) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x35c, 0x4, 0xf9d, 0x6, 0x9, 0x5, 0x2, 0x2, 0xffffe23f, 0x9, 0xfc4, 0xd2d4, 0x7c0, 0x5, 0x0, 0x9, 0x3, 0x8001, 0x2000000, 0xffff, 0x0, 0x5, 0x7, 0x7fff, 0x46be, 0x7, 0x0, 0x7c, 0x652c000, 0x7c, 0x7, 0x6]}) r0 = add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="5cc7c21480bac5ef6a7f044ad49a93755fc2321e2b79fb101a00cb7dd52701f50a03bb450d8a08af8e63e4fedc2b3567b4deab6747f95789fe145d6c7e6b47c2ca3c55d20ae9a506ea9f6eb19d01c216c0db5c7d023ebd98a6dc9e90cb43daf1fae3fdc4fb38c60e4b6753def5c620bca196777de1f24df17565b543cada2d5cb2cd9d81859384a5662de6341fcea48bd239388d7f38308d20e12aaf4a83a6f2e137b2e12754db50d8a078d95af48a8402ba3c406b8a5b36f7d450f118fd4c9b062c622309ffec63233e7ddc40ae9961a727e73af752d696c7fc0503ffc97a9b7686bf2b0ac2b6", 0xe7, 0xfffffffffffffff9) ioperm(0x1c995a39, 0x3, 0x1) ioperm(0x8, 0x1, 0x8) keyctl$link(0x8, r0, 0xfffffffffffffff9) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x400000, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000240)={0x1, 0x1, [0x0, 0x2, 0x1, 0xd2, 0x5, 0x7c, 0x1f, 0x2de]}) 17:31:56 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x751}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0xe7a3ef0def89d27e, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200900, 0x0) 17:31:56 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioperm(0x2, 0x9, 0xfffffffffffff62d) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback}, &(0x7f0000000040)=0xc) 17:31:56 executing program 4: r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0xffff) ioperm(0x0, 0xfe, 0x2) 17:31:56 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) prctl$PR_GET_THP_DISABLE(0x2a) 17:31:56 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:56 executing program 0: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/54, &(0x7f0000000040)=0x36) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000200)={0x0, {0x100, 0x4}}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@t) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000100)={0x2, "20bbd3310fe7dca30620ef35c96b92ed68917b44a170766e776d416bc1897d56", 0x2}) ioperm(0x10000000000006, 0xfffc, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240)={0x0, {0x7, 0x20}}) ioperm(0x8, 0x45, 0xfffa) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000000)={0x5, 0x0, [], {0x0, @bt={0x10001, 0x875, 0x0, 0x3, 0x1, 0x4, 0x3, 0x9, 0x4c, 0x4, 0x6, 0x100, 0x1000, 0x9, 0x19, 0xa, {0x1000, 0x5}, 0x0, 0x6}}}) r5 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x1c, 0xffffea88, 0x1007, 0x0, 0x1, 0x6, 0x1}}) 17:31:56 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:56 executing program 4: ioperm(0x40, 0x100, 0xffffffffffffff7f) ioperm(0x9, 0x424c, 0x1) 17:31:56 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x42040, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/226, &(0x7f0000000180)=0xe2) 17:31:56 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 3: socket$packet(0x11, 0x3, 0x300) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000040)={r0}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000080)={0x3, {0x3, 0x6, 0x7, 0x4}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 17:31:56 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:56 executing program 1: ioperm(0x0, 0x200, 0x0) ioperm(0x0, 0x43, 0x10000) ioperm(0x5691bb1e, 0x400, 0x7) 17:31:56 executing program 4: ioperm(0xfffffffffffffffc, 0xff, 0x1) ioperm(0x80000001, 0x7, 0x3) prctl$PR_SET_FPEXC(0xc, 0x10000) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) ioperm(0x1c00000000000, 0x895, 0x6fac) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) 17:31:56 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:56 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0xc84a0fab680e17ec, 0x1, @stop_pts=0x1}) 17:31:56 executing program 4: ioperm(0xffffffffffffffff, 0x4, 0x1) 17:31:56 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x1, 0x1}) ioperm(0x0, 0x100, 0x0) ioperm(0x800007f, 0x46, 0x8) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xc43, 0x60000) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/119, &(0x7f0000000180)=0x77) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x8}) 17:31:56 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:56 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) fstat(r1, &(0x7f0000000080)) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x401, 0x42, 0xfffffffd, 0x4, 0x7, 0xe1, 0x1, 0x4}}) 17:31:56 executing program 5: r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) sched_rr_get_interval(r0, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r2, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000000)={"0fa7887c5550a3f28fc3d86da3a45cb79740eaca7fd7de0a18f4be87035b", 0x9, 0x1, 0x401, 0x2, 0x0, 0x5, 0x4, 0x4, [0x101, 0x4, 0x1, 0xe74f, 0x5, 0x50, 0x6, 0x0, 0xffff, 0x2, 0x4, 0x800, 0x2, 0x80000000, 0x7ff, 0x7, 0xffffff7f, 0x81, 0x5]}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x81}, 0x8) 17:31:56 executing program 2: socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:56 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioperm(0x0, 0x100, 0x1) 17:31:56 executing program 1: ioperm(0x0, 0x100, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @local}, &(0x7f0000000080)=0xc) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x4}}, 0x10) ioperm(0x0, 0x43, 0x10000) 17:31:56 executing program 3: socket$inet6(0xa, 0x800, 0xff) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 4: ioperm(0x0, 0x100, 0x3) 17:31:56 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:56 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@remote, @dev={[], 0x40}, @val={@val={0x9100, 0x7, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "1dd9f840afe87637"}}}}}, 0x26) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:31:56 executing program 2: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:56 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x204001, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1ff, 0x14}) ioperm(0x0, 0x100, 0x1) 17:31:56 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockname$packet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:56 executing program 1: ioperm(0x0, 0x100, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) ioperm(0x0, 0x4, 0x80000001) 17:31:57 executing program 2: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:57 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x200}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r1) 17:31:57 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x8e}, "38506dd52333c574de03df761726dc0d9ded2d5af674861072edeff47224a01253159b172d394daa67a9dddad9ef587862150858187d20782ede8d6e7e52b98ddd582e172bda5ec12c51c0a24d46c64aaeae9a64e539bd2d221c31b4399bc89e31205c6a033738e5dfe2976a9ec7070f854b97092ec3d99a707af073abcd8ae2b3cdb89255e8c95d895165c20c46"}, 0x92) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x19, 0x3, 0xb, 0x200, 0x0, r0, 0x10, [], 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x40) socket$packet(0x11, 0x2, 0x300) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x8, 0x1, 0x2011, 0x6, 0x8, 0x2, 0x3, 0x2}}) modify_ldt$write2(0x11, &(0x7f0000000180)={0xbf19, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4300, 0x0) 17:31:57 executing program 4: ioperm(0x0, 0x100, 0x1) rt_sigreturn() 17:31:57 executing program 5: prctl$PR_GET_THP_DISABLE(0x2a) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000040)=0x4) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000180)={0x401, "fd5ec3007ee4740ad7fa53d41e4631349c8806c7cea8ed25dba090afa417af43", 0x3, 0x0, 0x2, 0x1000000, 0x3010c07, 0x2}) 17:31:57 executing program 1: ioperm(0x0, 0x100, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0xff) ioperm(0x100000001, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200100, 0x0) ioperm(0x0, 0x43, 0x10000) 17:31:57 executing program 2: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:57 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082ad47000fcdbdf250200000008000200020000000800010001000000"], 0x24}}, 0x4) socket$inet6(0xa, 0x4, 0x20) 17:31:57 executing program 4: ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x1, 0x2, @stop_pts=0x2}) ioperm(0x0, 0x100, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x284100, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)=0x1) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)={'veth0_vlan\x00'}) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000100)={0x0, {0x40, 0x9b, 0x5}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000180)={'bridge_slave_1\x00'}) 17:31:57 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0xcb37, 0x27, 0x800) ioperm(0x0, 0x43, 0x10000) 17:31:57 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:57 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x440080, 0x0) 17:31:57 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000aa23514d5501bb46848ef76d91394c765f23bbd1e8fe829d4b064182cb05773080f20d348a640dc028a643bbb3a3916c9b5a7d1d2640a06575ff7b2e93db54abc8d7298b7a54b09d51a843073a92648825c06ee45a6d722ede93920c2300629b629952b4b9961cec70e17e0533a8bc55357fe7a4f71d33bb37f9b02098c5587e46ef47348372321a54a4523c31e8256dd8274f97b44800e2f6009464f92c360e4932236fac61b917ffd6cbd727ed57338b74842f1b", @ANYRES16=r0, @ANYBLOB="00092abd7000fbdbdf25030000000c00050027000000000000000c0006000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000007574bd47ae4185935807fd6ac8441bb7969e027f28249dfe44ace5556fea41ef82a0d4b624626cb8530b616ff11763578a56041442c97f76ede428df15467b388f190700451dddca63e387c058b3ba7d0e594eefed15a51a90d76eece01b801d9b41016081e94c06c4f8b0e8b", @ANYRES16=r0, @ANYBLOB="000305000000fbdbdf25030000000c000800e7ffffffffffffff08000100000000000c0002009200000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4040000) socket$packet(0x11, 0x2, 0x300) 17:31:57 executing program 4: ioperm(0xceed, 0xfc, 0x8000001) 17:31:57 executing program 1: ioperm(0x0, 0x100, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000000)=0xee) ioperm(0x0, 0x43, 0x10000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xa09c) 17:31:57 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:57 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:57 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:57 executing program 0: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:57 executing program 4: ioperm(0x0, 0x100, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x4, 0x70bd28, 0x25dfdbfb, 0x2, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000808) 17:31:57 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:57 executing program 1: ioperm(0x0, 0x100, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioperm(0xfffffffffffffffd, 0x5, 0x8010000) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 17:31:57 executing program 3: socket$packet(0x11, 0x3, 0x300) 17:31:57 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r1) 17:31:57 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x5) 17:31:57 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:57 executing program 4: ioperm(0x0, 0x100, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 17:31:57 executing program 1: ioperm(0x40, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) socket$packet(0x11, 0x1, 0x300) 17:31:57 executing program 3: sched_getscheduler(0x0) r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) getpgid(r0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xb0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb316}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000801) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r1) 17:31:57 executing program 4: ioperm(0xfff, 0x100, 0x1) 17:31:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:57 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:57 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:57 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000000)) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000040)=""/206, 0xce) ioperm(0x0, 0x100, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000140)={0x7, {0x6, 0x3ff, 0x20, 0x8}, {0x7, 0x5, 0x9, 0x800}, {0x2, 0x1}}) ioperm(0x0, 0x43, 0x10000) 17:31:57 executing program 3: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x9, @vbi={0x1, 0x8, 0xc00, 0x32314d56, [0x1f], [0xcf, 0x3], 0x108}}) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000180)="9e74859b2b44819ea1750a88a00a2fb6d6c15b5a6493e824b1d69d8ce4ee0029a14ca1e1385c822fbdd16e5d4dba4797aa6c8a7bde06ef31d18156b530adb3c7162d97764e392b8397bf4891eb26f72e16ca0f7ac807fcc32c54663e5fff49e97e021279c5f994c93996e6570a3c43d4cdd1879583c7ceaa41db98817f4e6a9d7dc56bab7e2f8448db6cb23cc9a157dcb4a84d23b7371fa31e8300ece3b03dd041a00710f9244406165dc7c79e5945e7c6948590f59cd2523d997e26c6ac36cbfa32ce92e793387997dbca8982f998f5fb2a2b993324193ffb678fece33f6a839c181c655edc97e01e9f6576535cb7f6d410fc71b919eecafad43948fc643fc94dc2389e772696fe99439e7c4e03a2ba896d31928708f8da6b455680b4664c3f897260af5cc54845ca9d90241596da47f80615bfebae3bb16003b8d663159805e678cec7c3994243b86fe1bbc74bf37c185fe951fa1c022b29de5759cc8b7c24f10c71ebc8f6ccef20b8b14a1309adc64b5ea86137bf62eec85aa9e6d617e18317ec43749c1a6d280dbe7e028ab69e430210c2b10d7963a53a9c55c8ea2e2b0a3dbe851673ba53920f22fde287f8ebd4e3a5b38f093af12c62622112338e016f36d9b8597257d2cd1038843263f0372ba42c5e44648aecab124a76fc0f307b4060edd624c0133fae80d1b43b54df460f4bfb0ed6465f72b947fe30ff23c19efb870b9d51337b5dda3b2cddd8488c462e16a7a5185c108de066dab98bb83f6ea61d6a3cef5ecd2cb33a6373d924b876df288694d1575d767354df26c5b4085e0f0cd4663910379ece5f131b8ecb4479f57877f533ded122fd98dc181ee8dd3f91f09dfb14967cbaa4a13367f864fc4253e54c66d57eb11a7dc5be44953814324e13ed3fe0bebaef20c037b7f7a11daf8bf0a267227a8c4c3eaa6474afb03d7eb470998610ea39fdfa65832e41efe25c41d54c394d1e707e80e776615ce1d0e16ad6f61f79889d032bc249ba2c4e7663cf41bd6f3b20400113a9a8b90381ce8eb5f10fd8dd73e8d3c718c5863f9d660d30e9ad108d5be0b65d3181be97ec91b087af530c08fb8b6589160ec5ce5868a965900c9c93ee06ce9b73ba53a3847f584061e43a8cac948a24bc30633c8550346ad149037014780d271aca5057198e3b12f845ebf3adef3d9513b95679216cfe332009461f52ff0198a3985b18f20a0dc6b8b1156c5975cfbc41365867218b97c9ff222f821d8f5725e9f7b41c5eb13ccbc545fcc39bc6f6e41b56e2592b135b2a5529ac2b8ff96c4f23790d1b0d3a229504be692bbbbcd004ae8b1f3bfaa3ba961459eb812cec6426d9bcdcfbcc6c064e4d46370144ea5f9e3898c074658f972dc97e585738ea8ccc856c3090432ffa7abb85310c558e690fd228ab44ba201190c6b3c1e657d68e0d646e8d716dc9714aee6ec48348af72c6802e644590d765942d63e21542ecb8c8eb3820f95c5ad8df3f48660eeac1d4dfd3f7edb694bcabfc6dc0299e1698409d6e322c736c01919557a76dc48353268df9cf05a4365f9d870e071b325220a8849343b8793bc067863ebd5b7a9bafd93dc58070a4a43838246e5dc9717de7563596fbc211a68f32b5333c128e50494392895cd0d8d4d49164525a165320123a4bc4411c97628a2368ffbb62bd622dc8cb633f07d85f86309b0cf9f247fcddba68e1c6aa07193935aa330f6e82fee690055a41b441f70fbfec9bb41cb6b35e67255c7d2ef98897deab1b095f1711280a4d033d64d1aef2bbea1c23a7ac98a2cd137346d75b8138d4812a4dc4ab1f54d1f39092af7d54ca0a469728bce2f4c62f593ce18b451672423c8b4cdc6bb345187b11a5646f70bf29199daf83864febd57e878dfb6f8522719d0c459d9c87e9605862f572cada7a317a436735c9a43ab1580eb767f136e6e64dda1a0f17beb8a9bf92591211e2e426f893db514980694b4df81824f524fd799a09a9e97506070b1266fa374762dbf903ff37ac27075d715d5cdab4e96710e68aa93d4dc3435da74d041abb3e0361bd437145dbb4bd64c56b64bf57f9e26d4de84c22664bbdcc99fb9f3a2ecb93b10334cd63928c11550c7afd0e5d13f233da85329777b77ca943827b3fd65a0ce4c233d4c834ee117d772ec61058720bd188bfa8864f626868a67b9f9282d1ff3bcee9db16cef198847babb06d8e7be95a18578dcf2900cc536568f2fd56f0d5ae9f0bbae3a4155540129de84236a89e6b3ae49fcebbd915b9fba7a633d1b58f96b33851cd2bf57316f6c5c6f066e0934bc520e907eb7d781701318772fdf7c99c7a14b0bd305104768095f7b3536f6bbac46640f9ea3b0a54481e45e6cfb8b1d0f9e65a3247000e47a47a45926ea448f37150ab6cfb307b2eea6b2d617fea490597f491c570a0e4ebe13b91bd94f7ff6be8fc01ccbf766496a28aecd564fc321b91bc451594e332130230f6624bd55bc5673671e0f2e2d655e796d7cde732e884982cdf48eb98c9b7f508c498d639e42f4cc1ef3686971cd949db6ecde8b7f93b6c94b99ace4c4023d18842499a9b0b34e602f94a98ccd8298ad5ec65ae858ba947b30ca985dc5f3478c2e520f6de88b359bb1519fbb53d608d16db4d13e49b5a565708467a547be2cc6eee7d8e53ee6418dd8515794b4944098758766ebaaa9d925c48a5e9df44a8703d1312b814690cd805608d28e3971cf2923a5c23c42f94d46115c3803927dfd3d0ac405554db236d062cf8cecfe96ea00770b75d481e7a6eb4b7e0369f6a2c87f9229453b5d13052720fa0dd2e588daa7495a3ce76dc25637bd7521540e0afe39aa311ca88f9abb59a652f8b9aea3e26682b2ea9adb055c8666d1d07f93f47b243718bb74e42ce0e426a2d0c2ef67105f92280d6da9aa173bd07caeb43fbe145ad9ac5c7cb244623b8b71fe68b18da1e71c270152d4c0f69b4668bd6aa22e5a387e44978a1b9652e794b84610286a2b7f402bc7b03c34ae62d8449080c33b58f532633bf1fb52319ffdd57a9e3bd225e6c01704f8e8ebd4df3f3540711cfc5efb9f5e6f15715c3f5202c72a5b633a911633b69038dc2091892e905a27e23a9b9dad47004c12f69797330d19c95f2228779037ef6e5ea8e5cbed457ed41e5e03467f7d697f094e49a57bba25eafb66b5d0e6b208b1c524c44032f3ff1e1a4d822a228e8133a31a18ca375c18d209528ce288172c97c58f39210ccad2f9ae28fb96bfb99d2f2a121a674d3694e82282ab2e0a5f0750053dac39f08dacdf019d8ac96b7b777d546829d748ac6404fda9d6c3282fec1f9e6b60369ce4b03199e1b0b15d30d4571f3b445db94586dacff097b7a55cb7b602552920ec2371c2ab97caa7b8dd9f55f330f0cd5640ae024e67c90fd210febb85b21b8d39aaba3ea068faaa0b69c0b5bc374bf463e8c21df3a599adb1ea36c7c015c7702c9b14f04eaab6cf68432488c401cc52dace5badfdfb1bf9527e855a01b85c082b9ab251878bf9175f792d1e449026ce1d44da33786ee688cdd6591428e2740e3fca482a25727a971212435f5292a52a590572389fd976b5dfe4bac42ce0502a167f5fbb50068f97a69d7c6a5a0c6f9be099b7c19098296292358e2f16c0fd55e540909b8aeaf23d574f8a64730a64cd33fe508267ec44d413a862e54fba9fe75c7a00621ffbe380f434c87bba59c50689859e6ed58c48437437dbbf6c7bc1ab3f99c52adf4b24cec050c19be2f3494fc3bce65139cbe76cdfc63b39001a6cd13a04f4edc062c292bc3e8db10ff7fda6ff38036bcc425006d11ccca586a2d2825d2143643c4dde07f25974525e22fd5c3862bb3d6a7a1a06eb3ff350bd627494976b5f1ee956e04e6c8e7080ac435849eda638fe23ad62b93e546205fa297f66036db5e72fd76a85d72cebda70684476c55a25ab54c688be5da24b1f7fe41bd3baa33d64632b77140ce030ddbac48793373048beed787e1fdf85fbcb134fc84cd16f7dd62f93de98e00ba4976d506679101b3b8c0240cbd8ff60015f89375a97c1231c6adffa066752a4dc05ff5874d733655c09b4acde7b9820dc9dfae37ad1d15c8f4c87d12307fd1166f5c186d30ed1d471e7ad7a792f2dd7b0d6d98f3d39cd709bf7feb48552d857439fa139f1b58dae19e2879735fab2a84e1c2c602e8a8bbf69ad5d8d03bd47b563dbd0db008bd7e3fc1354c4058354aa1f76b78753e97faa3566d52521d2e47a85f681be3fdae5357d9d86a266c25f6b49f632c7c091e497e4d9671e577e12ff1a1e4d462de34ed57ba98cb9852c701de4bbf047d86101ea4a74561b95f0f1723b1f214c36e69216513b5f8f24c992823a329616dca33df981c04ad69fdd88fca4406b4a1de591bb92f635161c9c6f392fdd79d16e96336835510e8ce7edfb32bf53e23e51a3ad435bac4446afe65c1d6908f65f829b469320ac1044348509049b36aa5a8f5b6b992e1fd4a133b53d8b307db6cedcb85f62600cd29fa7d06ea84c23e13e5c61382e02f3e44388a8fb4b3c834a31114e3f8e1029de6b283a3f8b13f865e176a8102a1e4f3995c077e51364d047927630159d0edb6e8992c5d42645f279f0c7279665fb6f22cc8201991fb39600fe9f69dfda133e00494512f0ed1c49ee206ecfc9f803a12bb725288aef94a0c11fd88b049239a7f76ac17775e46042eeed9400d3cd27b4ee60227120f4c2e87195d0ce41f1253a823fdd91580302e675fe50ba4966e7b57dbd9fce31fb029e79dab011434792b2cd9f9be3c95b139035ce4833f069138a27973b358046523f47fe021c46eaa7ced7bb6aacc68cfb23cd7df2b9cb9f420e249e54041b04dfae7672a760cad96f5da3a33a23c0e212adde2d37fcc38afe624dae78a7306007c55b3bd62d845498d2edfabaeb4dd7412bdbcf1854b38b97d4c6bcd6b05b1c291eebe0c35804af6696105cadcd895c1936572aa158148774ac45e7a8b0ad950d1f81a73a9498326dfa13b81f6a58dcbf54cff2b41d17f9cc9ad53633f7cb4ef938aa1cbafa7f33a5512e3f647cddfebb758bc19ba06f00b59e7bfcee1611956b27ca32d713bb09240cda104306fbb6eb5496b170c603cf8ebbdce9023cfc920945ae468045522e404ed3c52bb2bd4c194fe497cdfee6cef12f7c42cc1c01ae0703d81e2f5a1e4add69a5bd883ca7bb55737b7ed4a4229815f74e0c850d3ef0cf813a9a1120a34d5f8ce4b46becf0bf453ae88468491c5dcfa463c04f996cf0bf9c8f3cc36b5508ebfcef358c63d9ffc3ea03bcdf8360e000dd299dd106f8a6d0478b5e5a6ee7d437a818fb41efb4e642c3796b4c2ee132bf3b375411db48c9c9dff533d2f0ca7484574bfdb81768e9b8ee5dee1872b29b36423dac511aa5856ff995d140e39b2813ab05fd606382df476f2a20c4db148d72def6fea7599042df0317f201b13d6ddc14180ec2c24c6787e528915a6d89b66846c96c21dc26bf4cfc53361b4090270d8ef5120bf31a08dbf7661d065a3d55df6c05f8fdb69251fcda6fbd12d2912066f89a3dba31f061f0f5f17c2ef32735ffbbd9c82eb9317aa3c7195c4d269557c2a8371b9ddd0031d7458f9b546a978b02dd4a84729de8035dbf1598a5ab80af109d440fb408e47080e55ad760b3c4689303842a6b1caa2c2f0be805c9266e08aed898944a9793f3daadb57e1815fe29d25c466d0f5ce49484b94620cc0708508062ee7177d2bd6b77a7fd2d20a68bb8d6d1f5b494f88760bf141a340bacc75b7e244ce887aee1f6b13bb8be25f47", 0x1000}) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x2, &(0x7f0000001240)={&(0x7f0000001180)="fda0c4b32d9dc1ccf2a702ccf4a788a1250f62403af9139488a6f1987859c1fd0a688d7d9d69266373fe9f1533256d3979c6a81de9cd0001bb5b6fb8469038a318f0e91c238b11c5712d7ffafaa8abcb9fbbe740ffce51d91799863850537d6aebb635db6c710a25a001c39cf7d4dae69d864d7f4e4232e0ad4c36cf7f6d4c09875af67a5c60782187", 0x89}) 17:31:57 executing program 4: ioperm(0x0, 0x100, 0x1) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="4fbd6f8189522528bb2922a307c956cb0e6c47dcc6d1469e1531105c813ba27463094a254f8167edb5c89e4b89870b4e788dd8853b9687151f7be98eacecda4669e9f3aad25b5288e3852625a3e0aafbe3f1836efc41d26595250d84ada7ddaefd94304cbd1673640b7e85cfef5149e564f27807f301d43fb64b348b0a943c52aeaf3a332406aee95241999484393d23e3095944c8bdc169ba637359650aea96ccc6dbdd6804e91d4e27720e4773e39278d577b4e20e", 0xb6}) ioperm(0x1, 0x0, 0x380000000000) ioperm(0x4, 0x1000, 0xfffffffffffffff7) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='a \b:* wm\x00'], 0x9) 17:31:57 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:31:57 executing program 0: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:31:57 executing program 5: socket$packet(0x11, 0x7, 0x300) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:57 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) prctl$PR_GET_SECCOMP(0x15) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) prctl$PR_GET_FP_MODE(0x2e) 17:31:57 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'a', ' *:* ', 'rm\x00'}, 0x9) 17:31:57 executing program 4: ioperm(0x0, 0x100, 0x1) time(&(0x7f0000000000)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 17:31:57 executing program 2: sched_getscheduler(0x0) r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) getpgid(r0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xb0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb316}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000801) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r1) 17:31:57 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffa, 0x4440) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101980, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x9, 0x12f400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000040)=@raw=[@map={0x18, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x0, 0x7, 0xffffffffffffffe0, 0xffffffffffffffed}, @alu={0x7, 0x0, 0xf, 0x8, 0x1, 0x40}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x90, &(0x7f0000000180)=""/144, 0x41100, 0x4, [], 0x0, 0x17, r1, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x49, 0x1}, 0x10, 0x23f06, r2}, 0x78) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:57 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x7ac943b479caa0b8, 0x2, @raw_data=[0x2, 0x3f, 0x10001, 0x6, 0x20, 0x1f, 0x3, 0x1f, 0x1, 0x200, 0x3, 0x12, 0x7fff, 0x4, 0x4, 0x67]}) 17:31:57 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:57 executing program 1: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioperm(0x0, 0x100, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x41) ioperm(0x0, 0x43, 0x10000) 17:31:57 executing program 4: ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x0, &(0x7f0000000080)=""/96) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000000)={0xb, {0x0, 0x7, 0x4, 0x9}}) ioperm(0x1000000000000, 0xd7e0, 0x1) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 17:31:57 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'a', ' *:* ', 'rm\x00'}, 0x9) 17:31:57 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r0, 0x0, 0x70bd2c, 0x81, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4c77}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffffe0}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000811) 17:31:57 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x64, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0xc5}, 0x20000040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r2) 17:31:57 executing program 3: socket$packet(0x11, 0x1, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x8543) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r8, 0x5404) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="200228bd7000fcdbdf25050000005400078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYRESHEX, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="01000100", @ANYRES32, @ANYBLOB="ecfd0100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000600010000000000000008000100000000001c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYRESDEC=r8], 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000300)={0x2, 0xffff, 0x2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x2680, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) 17:31:58 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 17:31:58 executing program 2: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioperm(0x0, 0x100, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x41) ioperm(0x0, 0x43, 0x10000) 17:31:58 executing program 4: ioperm(0x4, 0x100, 0x401) socket$inet(0x2, 0x1, 0x7ff) 17:31:58 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) 17:31:58 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioperm(0x0, 0x100, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000000)={"8433b8a7eb1a3b8439189219f5d589e0d99c45c41a730b0ed1793257ca2b", 0xc54c, 0x0, 0x1, 0xffff, 0xe9b, 0x1, 0xffff, 0x0, [0x1, 0x78, 0x4, 0xfffff153, 0xfff, 0x2, 0x6, 0xc37, 0x7fffffff, 0x3, 0x1ff, 0x0, 0x1ff, 0x1, 0x2, 0x1, 0x100, 0x8, 0xffffffff]}) ioperm(0x0, 0x43, 0x10000) 17:31:58 executing program 2: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioperm(0x0, 0x100, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x41) ioperm(0x0, 0x43, 0x10000) 17:31:58 executing program 4: ioperm(0x1002, 0x106, 0x4) 17:31:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:31:58 executing program 0: socket$packet(0x11, 0x3, 0x300) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 5: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="234c01647f6b52cb2c8aac4648e2218ad51d219c9d244eb0faf75cbd1c54a360b543671c3d91106115a4b29160bedcc710e4c4a44c65eca34060dc7b76a592e6bd3ea642d8ca5ba6b02af939658def8460f16cc1b8e18faa51a04398c1278bd025da4d98dc3e73e365c214babcce1f0bdeed4be0a754c05dce8b3b3158882c09a4e22e94b36e56ae8bbddc2788db6cac5bdf39922219bb5a4ccf1dada35be9cd23075144da559c5ca8f56e4882f1", @ANYBLOB="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", @ANYBLOB="000126bd7000fcdbdf250100000008000200020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1a400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r4, 0x0, 0xd, &(0x7f0000000540)='NLBL_CALIPSO\x00'}, 0x30) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x54, r5, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 17:31:58 executing program 2: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioperm(0x0, 0x100, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x41) ioperm(0x0, 0x43, 0x10000) 17:31:58 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioperm(0x0, 0x7, 0x1) 17:31:58 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000000c0)={0x0, @src_change}) 17:31:58 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x183, 0x38100) bind$bt_sco(r0, &(0x7f0000000040), 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x356157fc26ebdc42, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x7, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 2: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioperm(0x0, 0x100, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x41) 17:31:58 executing program 5: socket$packet(0x11, 0x3, 0x300) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0x8) 17:31:58 executing program 4: ioperm(0xffffffffffff7ffc, 0x10000, 0x7) ioperm(0x401, 0x1, 0x7) delete_module(&(0x7f0000000040)='$.\x04', 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000180)=0x4) 17:31:58 executing program 2: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'bridge_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x41) 17:31:58 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x100000020000041, 0x10002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 17:31:58 executing program 0: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'macvlan0\x00'}) 17:31:58 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:31:58 executing program 4: ioperm(0x0, 0x100, 0x1) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'syz_tun\x00'}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8) 17:31:58 executing program 3: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x5}, 0xfffffffffffffe69) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$inet6(0xa, 0xa, 0x4) 17:31:58 executing program 2: bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x41) 17:31:58 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x3, "6ab2c35eeb77f445f9db6de18b0e1e738604d62a181c2c006efe37901e327b3d", 0x3, 0xffff, 0x2, 0x800000, 0x21, 0x8}) ioperm(0x3, 0x0, 0x2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x109040, 0x0) 17:31:58 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r2) 17:31:58 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0xf, "ab42b627c97d"}) ioperm(0x0, 0x104, 0x1) 17:31:58 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:31:58 executing program 2: bpf$LINK_DETACH(0x22, 0x0, 0x0) 17:31:58 executing program 1: ioperm(0x0, 0x100, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0), 0x2) ioperm(0x0, 0x43, 0x10000) 17:31:58 executing program 4: ioperm(0x0, 0x3ff, 0x1) 17:31:58 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) socket$packet(0x11, 0x2, 0x300) 17:31:58 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 2: bpf$LINK_DETACH(0x22, 0x0, 0x0) 17:31:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x3, {0x828b, 0x4, 0x2, 0x8}, {0x5, 0xfffffff9, 0x800, 0x88}, {0x6, 0x8}}) socket$packet(0x11, 0x3, 0x300) 17:31:58 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) prctl$PR_GET_DUMPABLE(0x3) r0 = getpgrp(0x0) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000080)={0xb9, 0x1, 0x8, 0x10001, 0x101}) ioperm(0x401, 0x1, 0x5439) 17:31:58 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) 17:31:58 executing program 0: socket$packet(0x11, 0x9638b55d2cd5dff, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}]}, 0x28}}, 0x0) 17:31:58 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x9, {0x4, 0x2, 0x316d, 0x8000}}) ioperm(0x7, 0x102, 0x2) 17:31:58 executing program 2: bpf$LINK_DETACH(0x22, 0x0, 0x0) 17:31:58 executing program 1: ioperm(0x8, 0x100, 0xfffffffffffffffd) r0 = getpgrp(0xffffffffffffffff) getpgid(r0) ioperm(0x1f, 0x4106, 0x8) 17:31:58 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) 17:31:58 executing program 3: socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='\\\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 4: ioperm(0x0, 0x100, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x1, 0x200}) 17:31:58 executing program 1: ioperm(0x0, 0x100, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioperm(0x5, 0x401, 0x5) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x4) ioperm(0x0, 0x43, 0x10000) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) 17:31:58 executing program 0: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)=0x8) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x6, 0xffffffff, [], &(0x7f0000000080)=0x9}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r1) 17:31:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0x8004510b, &(0x7f0000000080)) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) 17:31:58 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) socket$packet(0x11, 0x2, 0x300) 17:31:58 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0xfffffffb}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, @jmp={0x5, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, @exit, @alu={0x4, 0x1, 0x2, 0x6, 0x4, 0x80, 0xfffffffffffffff0}, @exit], &(0x7f0000000040)='GPL\x00', 0x5, 0xe7, &(0x7f0000000180)=""/231, 0x41000, 0x15, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x5, 0xe, 0x3, 0x6}, 0x10, 0x21c43, r0}, 0x78) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:58 executing program 4: ioperm(0xffffffff, 0x10001, 0x6) 17:31:59 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x6) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="3e5045414b0c4552202700d44c696e652043617074757265272030303030302e7a30303030303030303030303030"], 0x2c) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = getpid() getpgid(r2) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000180)={"9e058183d6c11f7cfd9f4417a2f14782fb31eaff97c231fb1f1e65d4f757", 0x10000, 0x0, 0x0, 0x7f, 0x53, 0x9, 0x3, 0x1, [0x8000, 0x9, 0x8, 0x3, 0xfff, 0x8, 0xc0000000, 0x200, 0x6, 0x1ff, 0x2, 0x100000, 0x1, 0x7f, 0x7, 0x5bb, 0x1a, 0xfff, 0x40]}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000080)=""/185) 17:31:59 executing program 5: socket$packet(0x11, 0x1, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x33) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 1: ioperm(0x0, 0x100, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000), 0x10) ioperm(0x0, 0x43, 0x10000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x6, 0x2, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x64000000, 0x2a, &(0x7f00000000c0)=""/42, 0x40f00, 0xc, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x10, 0xebd, 0x10001}, 0x10}, 0x78) 17:31:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) ioperm(0x2000000003, 0x100, 0x20687396) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'ip6gretap0\x00'}) 17:31:59 executing program 0: socket$packet(0x11, 0x3, 0x300) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x2}}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:31:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0x8004510b, &(0x7f0000000080)) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) 17:31:59 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @frame_sync}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00', r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 17:31:59 executing program 1: ioperm(0x10000000000003, 0x100, 0x0) sched_getscheduler(0xffffffffffffffff) ioperm(0x0, 0x43, 0x10000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioperm(0xc49, 0x9, 0x7) 17:31:59 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) sysinfo(&(0x7f0000000000)=""/148) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x8, 0x44800) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0x40c163, 0x8}) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x4) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000100)={0x3, 0x0, 0x7, {0x5, 0x201, 0xffffff00, 0x7f}}) 17:31:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0x8004510b, &(0x7f0000000080)) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) 17:31:59 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) r1 = socket$tipc(0x1e, 0x2, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x2400, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) bind$tipc(r1, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x3, 0xd, 0x2, "78a25250d5a9fec80d37b2984f4e2f5ac3f5ac831114743ef4ec52596feadc21", 0x59555956}) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000080)=0x81, 0x60) restart_syscall() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 17:31:59 executing program 3: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x7, 0x1, 0x4, {0x1000, 0x16d, 0x1, 0x80}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x1, [], &(0x7f0000000100)=0x7f}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r1}) 17:31:59 executing program 1: ioperm(0x8000000, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) 17:31:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0x8004510b, &(0x7f0000000080)) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) 17:31:59 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 1: ioperm(0x0, 0x100, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) ioperm(0x0, 0x43, 0x10000) 17:31:59 executing program 4: ioperm(0x0, 0x100, 0x1) ioperm(0x4, 0x6, 0x7fff) 17:31:59 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 17:31:59 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0x8004510b, &(0x7f0000000080)) 17:31:59 executing program 4: ioperm(0xfffffffffffffffe, 0x1, 0xfffffffffffffffd) 17:31:59 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x1ff) 17:31:59 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x200, 0x4) 17:31:59 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r2) 17:31:59 executing program 4: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xffe, 0x1, 0x50313459, 0x6, 0xa, [{0x7f}, {0x4000041, 0x804}, {0x5, 0x2}, {0x41ce}, {0x3, 0x1}, {0x0, 0x9}, {0x40, 0x78a}, {0x936d8c8, 0x7}], 0x7e, 0x42, 0x3, 0x1, 0x2}}) 17:31:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) 17:31:59 executing program 5: socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 17:31:59 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioperm(0x7, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121040, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x2, 0x1, @start={0x5, 0x1}}) 17:31:59 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x40c000) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000040)=0x8) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) 17:31:59 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0x10001, 0x20000800, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) ioperm(0x0, 0x100, 0x1) 17:31:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:31:59 executing program 5: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x6df, 0xfffffffb, 0x200c, 0x6, 0xc}}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x7, 0x10000) r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) waitid(0x0, r0, &(0x7f0000000000), 0x2, &(0x7f0000000080)) ioperm(0xe8, 0x100000000, 0x40) 17:31:59 executing program 3: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 5: r0 = getpid() ptrace$setsig(0x4203, r0, 0x9, &(0x7f0000000000)={0x7, 0x7ff, 0x920}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000238100000000000500"], 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000000c0)=""/54, &(0x7f0000000080)=0x36) 17:31:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) 17:31:59 executing program 4: ioperm(0x0, 0x3, 0x8001) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4d001000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250100000008000100030000000800020002000000080002000200000008000200020000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4001) 17:31:59 executing program 1: ioperm(0x2000000000000, 0xfc, 0x1ff) ioperm(0x0, 0x43, 0x10000) ioperm(0x8, 0x3c8, 0x7) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x30000) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/73, 0x49) 17:31:59 executing program 3: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'syz_tun\x00'}) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x10000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x260043, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) 17:31:59 executing program 4: ioperm(0x7, 0x22, 0x100) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 17:31:59 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)={0x5, {0x3f, 0x10000, 0x80000001, 0xe3}, {0x9, 0x7, 0x3ff, 0x3}, {0x7, 0x4}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 5: ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/208) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40408d0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x880) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000280)) 17:31:59 executing program 0: socket$packet(0x11, 0x3, 0x300) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:31:59 executing program 1: ioperm(0x0, 0x100, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000013c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34}) ioperm(0x1, 0x9, 0x939) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) socket$inet(0x2, 0x6, 0x5) 17:31:59 executing program 4: ioperm(0x0, 0x100, 0x201) 17:31:59 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) write$proc_mixer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="494741494e0a50434d20274c696e6527203030303030303030303030303030303030fc08000000000000434d0a4d49430a564f4c554d450ad538075985acaef81cf2e1ef626a17c8a204c3386f421aa7ce8f04000000465c0c4bf15ab8d0877adb02bc585fe610d69f9a2aa2bd5e350c829a9dd3c8da847891ecebe228fb698426e955c15ee3f08e1988a55570de565dc427414ee7a4f73ba806be6f39c06ea4c54e36ad39301a0296b04948d97bf05f86d87d88687575f77f30800589aaad57fc35e69e65e5cd150cb1ffa583a970b0b15caceccb4a866a5d0728635031fb707e5dc1952edacbf950d5c44053f5fd736591ee11fc7d"], 0x38) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000180)) add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) restart_syscall() getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) 17:32:00 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) 17:32:00 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @initdev}, &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000000c0)={0x0, 0x1, @stop_pts=0x53}) 17:32:00 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @multicast2}, &(0x7f0000000040)=0xc) 17:32:00 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000002c0)={@private1}, &(0x7f0000000300)=0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000140)=0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x4, @sdr={0xce252365, 0x5}}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000180)=0x2) ioperm(0x0, 0x100, 0x1) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000200)={0x0, {0x0, 0x9}}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000280)={0x0, 0x3, 0x46, [], &(0x7f0000000240)=0x4}) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000380)=0x9) ioperm(0x0, 0x9, 0x4) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000340)=0xff) ioperm(0x8, 0x2, 0x8) socket$inet(0x2, 0x6, 0xd9) 17:32:00 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080140}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x11}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x4010) 17:32:00 executing program 0: socket$packet(0x11, 0x3, 0x300) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000088f70103178c040000002000aaab1b53d4b7160004adabd4a297e01f7fc70636d38bf865ead4bed5f61b4013cbab4a08a432fbfa2ec411ec7c20fbb213b4fd93e9540d640048afba57bfea292adec70245413f0be4dcf6aa00a91cb2359c63902bccba40851a8fc3"], 0x6a) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000180)={0x2, 0x1, @stop_pts=0x1000}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000380)={0x0, @frame_sync}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x2, 0x2) syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x7f, 0x1}) 17:32:00 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x53d402, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:00 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x2000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 1: ioperm(0x0, 0x5, 0x40006) ioperm(0x0, 0x43, 0x10000) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x50000, 0x0) 17:32:00 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4889}, 0xc040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000180)=0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r5 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x5, 0x40) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x40) 17:32:00 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:00 executing program 4: ioperm(0x0, 0x3, 0x1) 17:32:00 executing program 0: socket$packet(0x11, 0x3, 0x300) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={[], 0x11}}, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200, 0x0) 17:32:00 executing program 1: ioperm(0x0, 0x8c22, 0x2000000000000000) ioperm(0x0, 0x43, 0x10000) 17:32:00 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'geneve1\x00'}) 17:32:00 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:00 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 4: ioperm(0x0, 0x2000000000000ff, 0x7) 17:32:00 executing program 3: futex(&(0x7f0000000040), 0x9, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48800) clock_gettime(0x0, &(0x7f0000000280)) 17:32:00 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 1: ioperm(0x0, 0x100, 0x0) shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, &(0x7f0000000000)=""/111) ioperm(0x0, 0x43, 0x10000) 17:32:00 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:00 executing program 4: ioperm(0x0, 0x100, 0x1) futex(&(0x7f0000000000), 0x9, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x2, 0x1) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x8}) 17:32:00 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:00 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x85ed, 0x36d440) 17:32:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = add_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="6769288d011d20249fd9febed87d004311bfd98e45407cadfad59b5b8ccbb08958e40a6a746086e42c1b2334adc3738ea8cda1ca0e55e81c382aaf9be146cc01f2423d0a1992fcc41754ccd4d249735ed6bf3c18b81155c09e25292ca9d0d4ff3e6e9ae2fdcf2530dfc6480f972a667378fb2f48428ad3126ec6c1596dba9f1a645a456c2fd83da2d4191d8b731b00b850ff46edc567b10c91c70835a6e36e383e128c1aa15a00519504dcf4d5c91b7b1769f0905f33d2df39c2ca8236120dd32ab6e6f919c130421a3756c25fa6a95d0bec0cfc36decb40d645", 0xda, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, 0xfffffffffffffff9, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@acquire={0x390, 0x17, 0x100, 0x70bd28, 0x25dfdbfc, {{@in=@multicast2, 0x4d5, 0x33}, @in=@private=0xa010102, {@in6=@private0, @in=@multicast2, 0x4e23, 0x0, 0x4e23, 0x0, 0x2, 0x80, 0xc0, 0x32, 0x0, r2}, {{@in6=@empty, @in6=@private2, 0x4e21, 0x0, 0x4e21, 0x400, 0xa, 0x60, 0x20, 0x3c, 0x0, r3}, {0x10001, 0x9, 0x6, 0x8b, 0x8e4, 0x100000001, 0xfffffffeffffffff, 0x4}, {0x7, 0x6a17, 0x6790, 0x3}, 0x800, 0x6e6bc0, 0x3, 0x1, 0x1}, 0x64df2cf4, 0x3, 0x2, 0x70bd26}, [@etimer_thresh={0x8, 0xc, 0xdd3}, @extra_flags={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x34ff, 0x3, 0x1, 0x9, 0x83, 0xd68, 0x8}, {{@in=@remote, 0x4d2, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x0, 0x1, 0x5, 0x1f, 0x700, 0x8}, {{@in=@multicast2, 0x4d2, 0x2b}, 0x2, @in6=@private0, 0x0, 0x0, 0x1, 0x1f, 0x4, 0x8, 0x80000000}]}, @algo_auth_trunc={0x91, 0x14, {{'sha1\x00'}, 0x228, 0x180, "eb4de254aab176ada608107981982e68db8e6d3b89f30adbafe69353a45628c790bfa96f1e3b08fcbf9f96dfd412c389de1a6bda98b1d2a2b638af4ae7370571ae9261447d"}}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@empty, 0x4e21, 0x7c3, 0x4e24, 0x5, 0xa, 0x20, 0x30, 0x3c, 0x0, 0xee01}, {@in=@loopback, 0x4d4, 0xff}, @in6=@empty, {0x9, 0x1f, 0x8000, 0xff, 0xfff, 0x3, 0x0, 0xf89}, {0x8, 0x800, 0x20, 0x100000001}, {0x3, 0xfc6, 0xfffffff7}, 0x70bd28, 0x3506, 0xa, 0x1, 0x4a, 0x30}}, @etimer_thresh={0x8, 0xc, 0x38}, @coaddr={0x14, 0xe, @in=@local}]}, 0x390}, 0x1, 0x0, 0x0, 0x80}, 0x4020100) 17:32:00 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0xaa, 0x43, 0xfffffdff00000001) ioperm(0x0, 0x2, 0x100) 17:32:00 executing program 0: socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team_slave_0\x00'}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 4: ioperm(0x2, 0x100, 0x1) 17:32:00 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:00 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:32:00 executing program 4: ioperm(0x0, 0x4a80, 0x1) ioperm(0x9, 0x5, 0x40) ioperm(0xffffffff, 0x21, 0xb64) ioperm(0x2, 0x23, 0x4c4) 17:32:00 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 1: bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x1}}, 0x10) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000040)=0x399) ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) 17:32:00 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:00 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x980, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x9729834962f33db1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x3}, 0x10) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x2, 0x1, @start={0xfffffffa, 0x1}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 1: ioperm(0x0, 0x100, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) ioperm(0x0, 0x43, 0x10000) 17:32:00 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/3) 17:32:00 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:00 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x8, "b78f5f475fbd254b7eae1ee6767b5a0fbf8fefc9692ae4863524732af98c46de", 0x3, 0x3faa, 0x4, 0x6070b, 0x802, 0x5}) 17:32:00 executing program 1: ioperm(0x0, 0x100, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) time(&(0x7f0000000100)) ioperm(0x0, 0x43, 0x10000) 17:32:00 executing program 3: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getpgrp(0x0) 17:32:00 executing program 4: ioperm(0x0, 0x100, 0x1) ioperm(0x7fffffff, 0xffffffffffff38de, 0x0) 17:32:00 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:00 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$inet(0x2, 0x3, 0x991d) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00', r1) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1440}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000840) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0xfbfb}, @val={0x1, 0x0, 0x80, 0x6, 0xc6, 0x80}, @ipv6=@udp={0x9, 0x6, "805632", 0x1b7, 0x11, 0x0, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00', {[@srh={0xff, 0xc, 0x4, 0x6, 0x2, 0x0, 0xfffc, [@empty, @mcast1, @private1={0xfc, 0x1, [], 0x1}, @loopback, @dev={0xfe, 0x80, [], 0x28}, @dev={0xfe, 0x80, [], 0x33}]}, @fragment={0x33, 0x0, 0x3, 0x0, 0x0, 0x1, 0x68}, @hopopts={0x5e, 0x23, [], [@jumbo={0xc2, 0x4, 0xe5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x3f, 0xffff, [0x4]}}, @generic={0x9, 0x4e, "68de2a9209c0021788c1338b1ab7d2ebca3124d450bb6069f7fa0869f388148f2b5f99c7d63adb2e674a726d1f0922460c8256bd9681b4bb80f39d2e1f6ee84a66809ba72549307e0c0cb1cd8704"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x1, 0x9c, "6f78eaf04d8ce6e5d323e08f2493d8b298f3b193a27c5713578d5c6952a8b56439fffc46c2924cfa4f3651f65963632eb042481ce88e92d4add6c277f7a8643dac18f4548f61c7edfb2709fe2d2ff23337c67b7ca998c7477dd3e5be263a9b0c9a8517584454e0e974a5f2b3882d0d1a672324a2426dd6d693aa7b31ff2acdfa9d4bb9a8ef57d1543669663d63cfeebcf018b2ad62f29854100bae1b"}]}], {0x4e20, 0x4e24, 0x1f, 0x0, @opaque="e2fe96dd8c990aea577fc181e48453c8a8b7b5ddc391e7"}}}}, 0x1ed) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r1) 17:32:00 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000004"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00', r2) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14008000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:00 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000000)={"ca5566e8bc77e3710e79a0b6e15f2e5c213e080678d9c3b3689b13910d4d", 0x2, 0x2, 0x1, 0x0, 0x4, 0x8, 0x400, 0x0, [0x4, 0x20, 0x3, 0x7ff, 0x0, 0x3, 0x1, 0x7ff, 0x800, 0xeb37688, 0x2, 0x5, 0x4, 0x9, 0x1, 0xa59b, 0x10000, 0x4, 0x9]}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0x1, 0x1000, 0x3, 0xfffffffc, 0x2, 0x1, 0x5, 0x3]}) ioperm(0x1, 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) 17:32:00 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x80000001) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:00 executing program 4: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x8) ioperm(0x0, 0x100, 0x1) ioperm(0x5, 0x7, 0x1) ioperm(0x1, 0x3, 0x100) ioperm(0x3, 0x800, 0x7) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000100)) ioperm(0x5, 0xffffffffffffffff, 0x3) 17:32:00 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:01 executing program 1: ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x68ae, 0x9}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @multicast1}, &(0x7f0000000000)=0xc) ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x7, 0x7}) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000140)={0x401, 0x0, [], {0x0, @reserved}}) 17:32:01 executing program 0: ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x8, 0x6, [], &(0x7f0000000000)=0x81}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:01 executing program 5: r0 = getegid() fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1]) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x10000, 0x400000) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000040)=0x10000) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_FM_LOAD_INSTR(r3, 0x40285107) 17:32:01 executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe80000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 17:32:01 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x3, 0x300) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:01 executing program 4: ioperm(0x0, 0x100, 0x1) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000080)) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x2, "17ce909f3e6a3f208e19243c2fe09db0b7e03e1de9cf3afaa12fb11375d310ad", 0x1, 0x200, 0x3, 0x100, 0x8, 0x8}) 17:32:01 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x200, 0x9, 0x3f) ioperm(0x0, 0x8, 0x6) ioperm(0x4, 0x6, 0x40000000004) 17:32:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x84805) socket$inet6(0xa, 0x5, 0x6) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 17:32:01 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x450c00) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r8, 0x5404) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r9, 0x5404) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0xc4) prctl$PR_GET_DUMPABLE(0x3) 17:32:01 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0xfff) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@mcast2}, &(0x7f0000000040)=0x14) 17:32:01 executing program 4: ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000040)) ioperm(0x0, 0x100, 0x1) 17:32:01 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2795, 0x5}) exit(0x0) 17:32:01 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:01 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:01 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', r0) 17:32:01 executing program 2: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:01 executing program 5: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0xfffffff8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:01 executing program 4: ioperm(0xfffffffffffffff8, 0x100, 0x1) 17:32:01 executing program 4: ioperm(0x0, 0x100, 0x1) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) 17:32:01 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:01 executing program 3: r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0xfffffff9}) getpgid(r0) socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = getpid() sched_getparam(r2, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:01 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:32:01 executing program 2: syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x200000) 17:32:02 executing program 1: ioperm(0x0, 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/203, &(0x7f0000000040)=0xcb) ioperm(0x2569, 0x6, 0xfff) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000080)=0xfffffffe) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x4600, 0x0) ioperm(0x80000001, 0xe79, 0x2) 17:32:02 executing program 4: ioperm(0x2000000000005, 0x80000000, 0x101) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3}}, 0x10) add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 17:32:02 executing program 2: syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x200000) 17:32:02 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:02 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x14) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) 17:32:02 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:02 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @loopback}, &(0x7f0000000040)=0xc) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r1}, 0x8) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000200)={0x6, 0x3, 0x1}) 17:32:02 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:32:02 executing program 4: ioperm(0x0, 0x100, 0x1) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)='\x00') r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0xfff) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)='fscrypt:') 17:32:02 executing program 2: syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x200000) 17:32:02 executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x387f, 0x2, 0x7}}) ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x8a3, 0x10000) 17:32:02 executing program 3: ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x7, 0x3bb64f28, 0x6, 0xf19}}) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xb, 0x2, 0x20, @SEQ_CONTROLLER=0xfe, 0x84, 0x1, 0x6}) 17:32:02 executing program 2: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x200000) 17:32:02 executing program 4: ioperm(0x5, 0x100, 0x80000001) 17:32:02 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r2) r3 = getpgrp(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xee, &(0x7f0000000000)=""/117) 17:32:02 executing program 1: ioperm(0xaf37, 0x103, 0x10004) ioperm(0x0, 0x43, 0x10000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:32:02 executing program 3: socket$packet(0x11, 0x3, 0x300) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x10000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:02 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000040)={"204167c7962771241d40dfd50c12c09de377c36221515052df7177fa5d7e", 0x8, 0x0, 0x0, 0x9, 0x101, 0x90, 0x3, 0x6, [0x5, 0x401, 0x3, 0x1f, 0x200, 0x80000001, 0xe5, 0x8001, 0x4, 0x40, 0x7, 0x100, 0x1, 0x5, 0xffffff02, 0x2, 0x8001, 0x5]}) 17:32:02 executing program 4: ioperm(0x0, 0x100, 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) 17:32:02 executing program 2: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x200000) 17:32:02 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0xabaa, 0x4) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) 17:32:02 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x2, 0x40000009, 0x4) 17:32:02 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x2, 0x1, 0x401, 0x1, 0x5}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:02 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1ff00, &(0x7f00000000c0)=""/37) getegid() r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x400000, 0x0) fstat(r1, &(0x7f0000000040)) getegid() keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) 17:32:02 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:02 executing program 2: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x200000) 17:32:02 executing program 4: ioperm(0x0, 0x84a4, 0xfffe) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x48a61537b477af41}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1b}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000010) sched_getparam(r0, &(0x7f0000000100)) r2 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x1f, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x7, 0x8b) ptrace$getsig(0x4202, r0, 0x10001, &(0x7f0000000000)) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=""/243, 0xf3) 17:32:02 executing program 3: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="449c0a3d24169484443950f051f7b6807509e9b94e15ed12263c97c6f620cc76074c53022e3e62bb6eb5bd4fc15fe794f881757c18f055b758610a77996377f810c921c5e7b6d48d20d6278c35b084fdcf520651905e3b04e68092fd07c9c1a8330dfca0b32c75972e0d8a225e136bd7c9f1a54728ab88e8081df0e6424bf589a8434efadaaf276f57df82df6eada958abaddf22fb31717fcf2461036cb69b4207e27d1ecd865856b187308a5aeb7f831654bfbf838788498742", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf2502000000080001000100000008000200020000000800010001000000080002000200000008000100000000000800020002000000"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x4004000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x181000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000004c0)) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x38, 0x0, 0x0, 0x0, 0x4, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd8c1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd09a}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x40012) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', r0) socket$packet(0x11, 0x2, 0x300) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 17:32:02 executing program 0: socket$packet(0x11, 0x3, 0x300) add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000200)={0x0, "448ce1346b371c9d39c66b1454a588ed04c4be1f41c9bb7bbc1e54894a1c1c21a471bf4d40d4ab28f2d0c2fa5d141b9db9f36ec58e61db752b383942a7ba2bd6", 0x17}, 0x48, 0x0) r0 = shmget(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x400000, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000340)='/dev/video#\x00', 0x1, 0x2) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x7fffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x404000, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) uname(&(0x7f0000000040)=""/18) 17:32:02 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioperm(0x8, 0x2, 0x1) 17:32:02 executing program 2: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x0) 17:32:02 executing program 4: ioperm(0x0, 0x100, 0x1) ioperm(0x4f1, 0x2, 0x9) ioperm(0x7fff, 0x5, 0x100000000) 17:32:02 executing program 2: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x0) 17:32:02 executing program 1: ioperm(0x0, 0x43, 0x10000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:32:02 executing program 4: ioperm(0x0, 0x101, 0x10000000000000) 17:32:02 executing program 2: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x0) 17:32:02 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000002c0)={"5e73a662669d5eae17e1749e49606f6a7bbf2cc8423e2b9c414067a31457", 0x10000, 0x0, 0x1, 0x3764, 0x9, 0x10000, 0x5, 0x8, [0x81, 0x7, 0x8, 0x11, 0x6, 0x401, 0x8, 0xffffbd4b, 0x19, 0x9, 0x6, 0x7ff, 0x9, 0x2, 0x1, 0x10001, 0x9, 0xfffffffb, 0x10ce]}) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x78, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xdf48}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x96bd}]}, 0x78}, 0x1, 0x0, 0x0, 0x20010885}, 0x8000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r1) 17:32:02 executing program 4: read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/213, 0xd5) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r1) 17:32:02 executing program 3: socket$packet(0x11, 0x3, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) 17:32:02 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x0, 0x3) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0xae, 0xeac) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x88e5}, @void, @ipv4=@tcp={{0x15, 0x4, 0x1, 0x4, 0xeb, 0x68, 0x0, 0x3, 0x6, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x82, 0x1, 0x4, [{@multicast1, 0x5}]}, @timestamp={0x44, 0x10, 0x80, 0x0, 0x0, [0x1, 0x4, 0x7]}, @lsrr={0x83, 0xf, 0xb6, [@rand_addr=0x64010101, @remote, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xa2, 0x1, 0x4}, @timestamp_prespec={0x44, 0xc, 0x80, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}]}]}}, {{0x4e24, 0x4e24, r0, r2, 0x1, 0x0, 0x10, 0x80, 0x64, 0x0, 0xe756, {[@window={0x3, 0x3, 0x20}, @fastopen={0x22, 0xf, "e8454670a3840ae38d48ff9146"}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x2}, @eol, @eol, @mss={0x2, 0x4, 0x8}, @timestamp={0x8, 0xa, 0x766afc17, 0x41041111}]}}, {"9bc5755315bb7eba96e01af8c0f58741feeac2f16eae33704b81af194c5f5725f80cc095345171aa2d1250b7668a2a8d720bb6a41c593709f4fc2f3b72e74da4ff588aee13535ed676eed730accda55df0e5ed215ce3f4"}}}}, 0xef) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r3) 17:32:02 executing program 1: ioperm(0x0, 0x100, 0x0) futex(&(0x7f0000000000)=0x2, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x2) ioperm(0x0, 0x43, 0x10000) 17:32:02 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 17:32:02 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000002c0)={"5e73a662669d5eae17e1749e49606f6a7bbf2cc8423e2b9c414067a31457", 0x10000, 0x0, 0x1, 0x3764, 0x9, 0x10000, 0x5, 0x8, [0x81, 0x7, 0x8, 0x11, 0x6, 0x401, 0x8, 0xffffbd4b, 0x19, 0x9, 0x6, 0x7ff, 0x9, 0x2, 0x1, 0x10001, 0x9, 0xfffffffb, 0x10ce]}) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x78, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xdf48}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x96bd}]}, 0x78}, 0x1, 0x0, 0x0, 0x20010885}, 0x8000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r1) 17:32:02 executing program 4: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)=0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x17) ioperm(0x0, 0x100, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioperm(0x7fffffff, 0x80, 0x80000001) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0xb, 0x100, 0x4, {0xfffffffa, 0x1, 0x7f, 0x4}}) 17:32:02 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:32:02 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x680c00, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:32:02 executing program 1: ioperm(0x7, 0xffff, 0xfffffffffffffe01) ioperm(0x0, 0x1000000043, 0x10000) ioperm(0x2, 0xf9f, 0x5) 17:32:02 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}}, 0x20000000) 17:32:02 executing program 3: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x8, 0x0, 0x10000}) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8eb4, 0x8300) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000240)={r0, 0x8}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x9, 0x2041) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x8, 0x0, 0x1}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)={0x0, r4}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r7, 0x80085617, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000080)={0x1, 0x8, 0x3}) 17:32:02 executing program 5: socket$packet(0x11, 0x3, 0x300) 17:32:02 executing program 2: socket$packet(0x11, 0x3, 0x300) add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000200)={0x0, "448ce1346b371c9d39c66b1454a588ed04c4be1f41c9bb7bbc1e54894a1c1c21a471bf4d40d4ab28f2d0c2fa5d141b9db9f36ec58e61db752b383942a7ba2bd6", 0x17}, 0x48, 0x0) r0 = shmget(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x400000, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000340)='/dev/video#\x00', 0x1, 0x2) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x7fffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x404000, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) uname(&(0x7f0000000040)=""/18) 17:32:02 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = getpid() r1 = getpgrp(r0) getpgid(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='[\xd0!,*).@\',(^$^\'!\x00'}, 0x30) r2 = getpgrp(r0) getpgid(r2) 17:32:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:02 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:02 executing program 1: ioperm(0x0, 0x100, 0x0) clock_gettime(0x3, &(0x7f0000000000)) ioperm(0x0, 0x43, 0x10000) ioperm(0xfffffffffffffff7, 0x81, 0x7f) 17:32:02 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0xabaa, 0x4) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) 17:32:02 executing program 4: ioperm(0x0, 0x44a6, 0x3) 17:32:02 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0xffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:02 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0xfffffffffffffffb) ioperm(0x200000b, 0x100, 0x10) 17:32:03 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x191042) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:03 executing program 4: ioperm(0x0, 0x100, 0x1) ioperm(0x6, 0x3, 0x3) 17:32:03 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:03 executing program 1: ioperm(0x0, 0x100, 0x0) geteuid() ioperm(0x0, 0x43, 0x10000) 17:32:03 executing program 4: ioperm(0x2, 0x100, 0x20) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0xb, 0x0, &(0x7f0000000100)}) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f00000000c0)=0x101) 17:32:03 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:32:03 executing program 2: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x200000) 17:32:03 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x10a00, 0x0) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x3, 0x1, 0x52, 0x9, 0x4, 0xff}, @ipv4=@generic={{0x3f, 0x4, 0x1, 0xc, 0x1a0, 0x67, 0x0, 0x0, 0x1d, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x24, 0x10, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc4d7}, {@loopback, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x4}]}, @rr={0x7, 0x17, 0xa, [@multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0xd2, 0x1, 0x9, [{@rand_addr=0x64010101, 0xff}, {@local, 0x7}, {@rand_addr=0x64010100, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xfa, [@remote, @empty]}, @timestamp_prespec={0x44, 0x54, 0x66, 0x3, 0x2, [{@loopback, 0x2}, {@multicast1, 0x2ae6}, {@local, 0x7}, {@empty, 0x800}, {@multicast1, 0x2}, {@broadcast, 0x100}, {@multicast2, 0x1}, {@broadcast, 0x47bc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x7ff}]}, @ssrr={0x89, 0x1b, 0x39, [@local, @broadcast, @broadcast, @multicast2, @local, @remote]}, @noop]}}, "f48c970fc35c8f521a2fbfd8daee7875ad538de6b124aa7ef6328ec7393b4f1f6c5299318ec25011b914d1e1c254a5f1987db6754e3a9881721c5df3b6d397cc867d9f3725544d3239cf9d1921aed64b8065919b3faa06c2f8157a426080c8748be56a3dc824e66d92b92acfc16afc7ebe3f925223b70f86dca59cafcbcf021985a9ca965faa2e09345eaa2023f97b628aa4da8022f69539603d3591df8e498835970c11"}}, 0x1aa) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) modify_ldt$read(0x0, &(0x7f0000000080)=""/143, 0x8f) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x40, 0x1}) 17:32:03 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:03 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 17:32:03 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x3}}, 0x10) 17:32:03 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioperm(0x8, 0x40, 0x6) 17:32:03 executing program 2: ioperm(0x0, 0x100, 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) 17:32:03 executing program 3: socket$packet(0x11, 0x3, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:03 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:03 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x20e441, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000100)={0x80, 0xa, &(0x7f0000000000)="5ff8437cb6bf6ac506c03fda45ed43e8ef46bad23db7a54c77cf92e8d3b8b9a905426d53a2b45fa06ab33100827830e7e38881b7b890d0185278ea13f4b0b1d5fa354f562445733cd9e8bb9ce5ccb2e1d713c2fbf8ab07e6fcee3b373ccc365c32c82d994cd34cf7926e6ac8404bcc4f49d783acf579cc6545e2b6d40d2c76d66cdbf6656b88fefde125257219390b8d8189abb32bf2397a13b8a23e5f3e0963af3fcc3535fa2e856e2006801e8f647661359e6007c5a785529a51afcd3045fccb2d4e53ca06d1", {0x8, 0x8, 0x4745504a, 0x0, 0x8000, 0xbf, 0x7, 0x6}}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000140)={0x9, {0x7fff, 0x0, 0x4, 0x80}, {0x6, 0x400, 0x1f, 0x2}, {0x1, 0x3}}) 17:32:03 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x4) 17:32:03 executing program 0: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:32:03 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00', r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 17:32:03 executing program 4: ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000040)) ioperm(0x0, 0x100, 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x402400, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) 17:32:03 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 17:32:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00', r3) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c0}, 0x40004) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x41}, "bd89dd40e40270ee239f0ee0bb0505f09de4ab114df844e7565cbfbfad5e5f13293d9ae80a6528f1d4519363be7fd0c650ec2ac141ba91feda5a61398f4615c8d8"}, 0x45) socket$packet(0x11, 0x2, 0x300) exit(0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000340)={0x0, 0x1000, 0x7, [], &(0x7f0000000300)}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', r4) 17:32:03 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) geteuid() 17:32:03 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioperm(0x8, 0x1, 0x80000000) 17:32:03 executing program 4: r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x4, 0xcb, 0x6000, 0x0, 0x0, 0x8}) ioperm(0x0, 0x100, 0x1) 17:32:03 executing program 2: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:32:03 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) fstat(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:03 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r1) 17:32:03 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x100}, 0x8) 17:32:03 executing program 2: ioperm(0xaf37, 0x103, 0x10004) ioperm(0x0, 0x43, 0x10000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:32:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioperm(0x0, 0xfd, 0x7) ioperm(0x4, 0xffff, 0x5) 17:32:03 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x94d2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14005c31456b100002142ec35c51c80430accfe2e1eb48b7f6af7533d821051cd059114b48744fb80cd16b8d3bf1758b8a5155f8b723b0e11b4478766ccba15c1df73bb7ed891498942d05047f381c13f055a94ddc93b91847a033e1352927f585bcc7a6f5c33231a70baf081997b75726a342e0e3735f20d368d0f237c9ef8c492866ce7d20efa86dec20223d2ecd28707a9f94e7ea4f0ad63ef174d540bc51866f0a5089365ed2f18d25d95947285b3eb31ed2abad079c097ec449e27d446a501fc6a830338cc186df8687d365f0627f7e469d2d0c025c4b9a6209185127750e1cbba25904c59877eed1f77ba35fa23b8cd9851b317a197c8fd12774a7ad472f0b391591180d04ba", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000200)=0x3ff, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r1) 17:32:03 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)='-(@[$/\'+[\x00'}, 0x30) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x48000, 0x0) ioperm(0xfffffffffffffffe, 0x100, 0xfffffffffffffffe) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000100)=0x41d) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000140)) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000040)={"5affb55dfaa5708226d48954be9e5b6c8be3fe13bb8769ec0bb67c6bb3f4", 0x80000000, 0x2, 0x0, 0x1000, 0x7fffffff, 0x8, 0x81, 0x4, [0x30, 0x6, 0xfff, 0x3, 0xffffffff, 0x3ff, 0x5f8, 0xffffff81, 0x8, 0x401, 0x2, 0x7, 0xfffffffc, 0xffffffff, 0x40, 0x8000, 0x8, 0x9, 0x65ca0]}) 17:32:04 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:04 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x10001, 0x8001, [], &(0x7f0000000000)=0x7}) 17:32:04 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r2) r3 = getpgrp(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xee, &(0x7f0000000000)=""/117) 17:32:04 executing program 4: ioperm(0x8, 0x400, 0x1) ioperm(0x7, 0x7, 0x7) 17:32:04 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x8, 0x200000) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000240)={0x40, 0x70, &(0x7f0000000140)="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", {0x7ff, 0x1, 0x384c4150, 0x6, 0x7, 0x1e85, 0xa, 0x4}}) ioperm(0x0, 0x100, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000280)={0xb, {0x1, 0x2, 0x69bbd251, 0x7}, {0x4, 0xc, 0x2aa8, 0x4}, {0x13a9a1cf, 0x7f}}) delete_module(&(0x7f0000000040)=']]^}.\x00', 0x200) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="33def5e588847aa31e4099537524912fa37d0c9c7f9fd9667a258ebd522253e6638daa60ec7c73e0b3102ec088d76ed59c"], 0x6) ioperm(0x0, 0x46, 0x10000) lookup_dcookie(0x7ff, &(0x7f0000000080)=""/85, 0x55) 17:32:04 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x1070bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000004) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)=0x1) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000180)) 17:32:04 executing program 4: ioperm(0x0, 0x100, 0x1) ioperm(0xfffffffffffff243, 0x100000000, 0x2) 17:32:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00', r3) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c0}, 0x40004) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x41}, "bd89dd40e40270ee239f0ee0bb0505f09de4ab114df844e7565cbfbfad5e5f13293d9ae80a6528f1d4519363be7fd0c650ec2ac141ba91feda5a61398f4615c8d8"}, 0x45) socket$packet(0x11, 0x2, 0x300) exit(0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000340)={0x0, 0x1000, 0x7, [], &(0x7f0000000300)}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', r4) 17:32:04 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101002, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) 17:32:04 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@x={0x94, 0xc, "b961ddb69476"}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x8b72) write$proc_mixer(r0, &(0x7f0000000080), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:04 executing program 3: socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:04 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee01) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0xfffffff8, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r3, 0x4) 17:32:04 executing program 4: ioperm(0x0, 0x100, 0x1) ioperm(0x0, 0x9, 0x11db) 17:32:04 executing program 1: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x60000, 0x0) 17:32:04 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 17:32:04 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:04 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040080) prctl$PR_GET_DUMPABLE(0x3) 17:32:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet(0x2, 0x803, 0x5) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x9de5}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0)) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000300)={'gre0\x00'}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000040)={0x0, 0x80}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000080)=@raw=[@generic={0x2, 0x0, 0x3, 0x5, 0x1}, @jmp={0x5, 0x1, 0x5, 0x6, 0x2, 0xc, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x20, 0xc, &(0x7f0000000100)=""/12, 0x41000, 0x2, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0x4, 0x6}, 0x10, 0x2afb3}, 0x78) 17:32:04 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x5, 0x41, 0x6) ioperm(0x5, 0x8, 0x7fff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioperm(0x0, 0x43, 0x10000) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x1, 0x3}}, 0x10) r0 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="e3aef2fa55df57a9ab09ccc1f288b2898630f389d21be274c7bc450d9f8111499840cbe24909f3558382e4961a84680b8f44600ec33ba8bd861ac853abe896833f4010d56523efdf3951c4347d8f85b20e9d2d3cb49e5b00df6ed01dfcfed3a60262716bb407a05e5d89a8a8ed11f9e39b51233cbc6db1a025e2602835dd61b4f92ef48035417de61db7d546c4ff9d3f0481b2cb9af6b142503d55467d50944ae39d563322ee868d281e77bfbdaa06ff18cfc51daef0", 0xb6, 0xfffffffffffffffb) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x40999653, 0x0) keyctl$unlink(0x9, 0x0, r0) ioperm(0x3f, 0x1, 0xf6c) 17:32:05 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@x={0x94, 0xc, "b961ddb69476"}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x8b72) write$proc_mixer(r0, &(0x7f0000000080), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/116) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = getgid() r1 = getegid() getgroups(0x3, &(0x7f0000000000)=[0x0, r0, r1]) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 1: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) keyctl$clear(0x7, 0xffffffffffffffff) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)={0x4, {0x8001, 0x4, 0x400, 0xffff}, {0xfffffb67, 0x1, 0x8, 0x10001}, {0x4, 0x6}}) 17:32:05 executing program 4: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x17c, &(0x7f0000000340)='Z\x9c\xee\'\xfb\xb6\a\xab<%N2\x8e\xbb\x8c}\xc6\n\xe3\xe3\x12$.<\x9c\n8L\xe7\xfa\xbc0\xd75\x9c\x91\xef\x18\xbd\x10\b\xb7\x95!\x9e%\x86\xf2\xb9&\xb0\xab7\xa2\x85=\xe3,./\x18\xf7\xc8\xcf\xbf\xa1B\xb8q+\x894\x8a\x86\x19\a\x1c\x00\x10\xd2r\xab\xbfn\x7f\x1f\x12M=\x92\x16\xc9\n;\xc0\xdb\x19\xe1D\xa4sx\x17\xfb\xa7k=X\xbeYq\xab\x1c\x03\x8e\x11ap\xed\xf3\x9b\xd7\xc1UA\xa2\xe4\xa4\xd2\'\xb7t)\x8au\x81\xd6jf1I\xf5/\xc2\b\x00y\xf9]\x89\x9a\x96Y\xf0\x18moM\xee\xab\x83\x0fv\xeb\xd8\x96\xec)\xd0\xd83\xbbw\v\\\xe7\x9b`-\xaf\xcc\x90\x95v4\'\xeb\x06}\xd7@\xb3\xcb?g\x05-\xbd\xb1\x1d\xa7\x1c^\f\xaf\xd3\xb8s\xf9\t\xfd;W\x03\'0l\x03\xfd\x83\xd3[yJm`Z=\x1f\xf5r*U\x19.\xa9\x05~\x91\xec\x94\xd94\x00\x00\x00\xa2\xaa\xcd&\xfe\xfd\xe4\xcaF\xd0\x83-\x96\xf1\xa8\xd4.U\x82&\xb2\xe9\xe0T\xadX\xca\x83\xc9\b\xc0\xee\xa9\xe6j\xc7\xef\xbb\xe6\xa9k\xa4V\xb5\x9a\x83\x82$\xcb^v\xfb\x12\xc2\x9e\xdan.\x8e\xb6\xc5d\x17\xaeoWu>\xed\xb3\x7f>\x92\xd4\x18\xde\xfeq\v|5\xed\xc5\t\x05\xf7\xbc^\xc7\xb9\x04\x1e\xfdI\xf5}\x86\xaa\f\b\xd1Q\xef\xd6\xc5`\xe0O\x1b,k|\x99\xa9\xb45\x8e6\"D\x98\x9eh&\xd5\xaa\xd0\x15Q\xe9\xff%\xfb\xb4'}, 0x30) ioperm(0x0, 0x100, 0x1) 17:32:05 executing program 3: socket$packet(0x11, 0x2, 0x300) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 1: ioperm(0x0, 0x2, 0x2) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x5}) ioperm(0x0, 0x43, 0x10000) 17:32:05 executing program 4: ioperm(0x0, 0x100, 0x1) ioperm(0x8fb, 0x4, 0x7ff) prctl$PR_GET_KEEPCAPS(0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 17:32:05 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x2404c105) 17:32:05 executing program 2: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 0: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 1: bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x2}}, 0x10) ioperm(0x0, 0x100, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioperm(0x0, 0x43, 0x10000) 17:32:05 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x7f, 0x4) 17:32:05 executing program 4: ioperm(0x0, 0x100, 0x1) r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x484180) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={[], 0x12}}, 0x8) r2 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) r3 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, 0x0) r4 = getpgid(r0) sched_getparam(r4, &(0x7f0000000000)) 17:32:05 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='nbd\x00'}, 0x30) socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:32:05 executing program 0: ioperm(0x1b778086, 0x8, 0x8001) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@acquire={0x1bc, 0x17, 0x100, 0x70bd26, 0x25dfdbfc, {{@in6=@private1, 0x4d6, 0x6c}, @in6=@loopback, {@in=@broadcast, @in=@empty, 0x4e22, 0x39c, 0x4e22, 0x3, 0x2, 0xa0, 0x80, 0x11}, {{@in=@local, @in=@private=0xa010101, 0x4e23, 0xfc00, 0x4e24, 0x91, 0x2, 0xa0}, {0x0, 0x1f, 0x8001, 0x100000000, 0x2800000000000000, 0x80000001, 0xfffffffffffff10e, 0x1}, {0xffffffffffffff7f, 0x8, 0x7ff, 0xff}, 0x6, 0x6e6bb1, 0x1, 0x0, 0x6, 0x1}, 0x2, 0x0, 0x2fb3cc47, 0x70bd27}, [@algo_comp={0x94, 0x3, {{'lzs\x00'}, 0x260, "222ce01f3fb6dfc3fc0714bf9e7b8629071a98bdf9b0d3b26fd33c075ff6052f4f0fb44abc5ef8da82c71784c36f0689abcb8da48a8d041f0e58a02acf876cd0a361893971a8de4cb55c8a94"}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x5) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 1: ioperm(0x0, 0x100, 0x0) getgroups(0x1, &(0x7f0000000000)=[0xee01]) ioperm(0x0, 0x43, 0x10000) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00', 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x800, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x896}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 17:32:05 executing program 4: ioperm(0x0, 0x100, 0x1) exit(0x0) 17:32:05 executing program 5: socket$packet(0x11, 0x3, 0x300) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x84805) socket$inet6(0xa, 0x5, 0x6) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 17:32:05 executing program 0: socket$packet(0x11, 0x1, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008004) 17:32:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x218002) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'veth0_vlan\x00'}) ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) getgid() 17:32:05 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 0: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 17:32:05 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) modify_ldt$write2(0x11, &(0x7f0000000040)={0xffffff01, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 17:32:05 executing program 2: socket$packet(0x11, 0x3, 0x300) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:05 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@empty}, &(0x7f0000000100)=0x14) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x9c, 0x1ff, 0x7fff, 0xdc8, 0x4, 0xffffffff, 0x7, 0x5, 0x7f, 0x9, 0x5, 0x81, 0x7, 0x0, 0x320, 0xffffffc0, 0xfffffffe, 0x7fffffff, 0x6, 0x4, 0xd18, 0x8, 0xffff, 0x7fff, 0xfffffff8, 0x401, 0x3, 0xff, 0x129, 0x2ba6918e, 0x1f, 0x6]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'veth1_to_hsr\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x451fbf98}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 17:32:06 executing program 4: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@empty}, &(0x7f0000000100)=0x14) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x9c, 0x1ff, 0x7fff, 0xdc8, 0x4, 0xffffffff, 0x7, 0x5, 0x7f, 0x9, 0x5, 0x81, 0x7, 0x0, 0x320, 0xffffffc0, 0xfffffffe, 0x7fffffff, 0x6, 0x4, 0xd18, 0x8, 0xffff, 0x7fff, 0xfffffff8, 0x401, 0x3, 0xff, 0x129, 0x2ba6918e, 0x1f, 0x6]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'veth1_to_hsr\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x451fbf98}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 17:32:06 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x1, 0x4, 0x7, 0x800}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:32:06 executing program 2: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 1: ioperm(0x0, 0xf12c, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$nl_xfrm(0x10, 0x3, 0x6) ioperm(0x0, 0x43, 0x10000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000080)) 17:32:06 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@empty}, &(0x7f0000000100)=0x14) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x9c, 0x1ff, 0x7fff, 0xdc8, 0x4, 0xffffffff, 0x7, 0x5, 0x7f, 0x9, 0x5, 0x81, 0x7, 0x0, 0x320, 0xffffffc0, 0xfffffffe, 0x7fffffff, 0x6, 0x4, 0xd18, 0x8, 0xffff, 0x7fff, 0xfffffff8, 0x401, 0x3, 0xff, 0x129, 0x2ba6918e, 0x1f, 0x6]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'veth1_to_hsr\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00', 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x451fbf98}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 17:32:06 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x20040010) 17:32:06 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', r0) 17:32:06 executing program 1: ioperm(0x0, 0x103, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) ioperm(0xffffffff, 0x4, 0x10000) 17:32:06 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x820b, 0x9, 0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 4: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 2: socket$packet(0x11, 0x0, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe80000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 17:32:06 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10003, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) 17:32:06 executing program 1: ioperm(0x0, 0x100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x640803, 0x0) ioperm(0x0, 0x43, 0x10000) 17:32:06 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x40, 0x200201) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10) 17:32:06 executing program 4: ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x8, 0x6, [], &(0x7f0000000000)=0x81}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 0: prctl$PR_SET_FPEXC(0xc, 0x20000) prctl$PR_SET_FPEXC(0xc, 0x40000) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$inet(0x2, 0x3, 0x991d) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00', r1) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1440}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000840) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0xfbfb}, @val={0x1, 0x0, 0x80, 0x6, 0xc6, 0x80}, @ipv6=@udp={0x9, 0x6, "805632", 0x1b7, 0x11, 0x0, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00', {[@srh={0xff, 0xc, 0x4, 0x6, 0x2, 0x0, 0xfffc, [@empty, @mcast1, @private1={0xfc, 0x1, [], 0x1}, @loopback, @dev={0xfe, 0x80, [], 0x28}, @dev={0xfe, 0x80, [], 0x33}]}, @fragment={0x33, 0x0, 0x3, 0x0, 0x0, 0x1, 0x68}, @hopopts={0x5e, 0x23, [], [@jumbo={0xc2, 0x4, 0xe5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x3f, 0xffff, [0x4]}}, @generic={0x9, 0x4e, "68de2a9209c0021788c1338b1ab7d2ebca3124d450bb6069f7fa0869f388148f2b5f99c7d63adb2e674a726d1f0922460c8256bd9681b4bb80f39d2e1f6ee84a66809ba72549307e0c0cb1cd8704"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x1, 0x9c, "6f78eaf04d8ce6e5d323e08f2493d8b298f3b193a27c5713578d5c6952a8b56439fffc46c2924cfa4f3651f65963632eb042481ce88e92d4add6c277f7a8643dac18f4548f61c7edfb2709fe2d2ff23337c67b7ca998c7477dd3e5be263a9b0c9a8517584454e0e974a5f2b3882d0d1a672324a2426dd6d693aa7b31ff2acdfa9d4bb9a8ef57d1543669663d63cfeebcf018b2ad62f29854100bae1b"}]}], {0x4e20, 0x4e24, 0x1f, 0x0, @opaque="e2fe96dd8c990aea577fc181e48453c8a8b7b5ddc391e7"}}}}, 0x1ed) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r1) 17:32:06 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x290040) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x420600, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) 17:32:06 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c8f012000e00050014240a003c00010001000000000065375f89d59900800800"], 0x17) 17:32:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000003c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000400)={0x0, 0x0, [], @raw_data=[0x800, 0x5, 0x5, 0x200, 0x1, 0x0, 0x45, 0x6, 0xfffffffd, 0x2, 0x7ac2, 0xfa8, 0x9, 0x5, 0x5, 0x0, 0x6, 0xffff, 0x200, 0x5, 0x7, 0x52, 0x4, 0x5, 0x9, 0x69, 0x5, 0x1, 0x9f, 0x8000, 0x800, 0x4]}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x40, 0x0, 0x701, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe783}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40084}, 0xc0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000004c0)=""/160, &(0x7f0000000580)=0xa0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000380)=0x8000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x311002, 0x0) bind$bt_sco(r1, &(0x7f0000000180), 0x8) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0x8, 0x0, 0x2007, 0x9, 0x5, 0x4, 0x2, 0x6}}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f00000002c0)) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self\x00', 0x4200, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 1: ioperm(0x0, 0x6, 0x0) ioperm(0xfffffffffffffffc, 0x20000000043, 0x100000000000003) 17:32:06 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10003, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) 17:32:06 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:06 executing program 3: socket$packet(0x11, 0x3, 0x300) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x210880, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0xe, {0xe6aa, 0x6, 0x6, 0x6}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2080c}, 0x60000000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x3f) 17:32:06 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0xd6000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x10001, 0x3}) 17:32:06 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x16080) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 4: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x8, "b78f5f475fbd254b7eae1ee6767b5a0fbf8fefc9692ae4863524732af98c46de", 0x3, 0x3faa, 0x4, 0x6070b, 0x802, 0x5}) 17:32:06 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:06 executing program 1: ioperm(0x0, 0x100, 0x0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x42000, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000180)={0x3, 0x1, [0x9, 0xedf, 0x4, 0x32, 0x2, 0x4, 0x8]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000200)) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x2, "03d13230977edcad93ea8ac351c6386b12cdb3819b58e6ed690f52ed59501e94", 0x3, 0x1, 0x4, 0x200000, 0x800}) ioperm(0x0, 0x43, 0x10000) 17:32:06 executing program 0: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 5: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000080)) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0xfffffffffffffffe) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x10001) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x48000) 17:32:06 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1000, 0x80, 0x100b, 0x7, 0x7, 0x6, 0x0, 0x6}}) 17:32:06 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x20043, 0x10000) ioperm(0xe7, 0x21000000000008, 0x9) 17:32:06 executing program 2: socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team_slave_0\x00'}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:06 executing program 1: ioperm(0x0, 0x5e0, 0x0) ioperm(0x0, 0x43, 0x10000) 17:32:07 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 5: clock_gettime(0x2, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:07 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 1: socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team_slave_0\x00'}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 2: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 0: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 17:32:07 executing program 3: getpgrp(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000500000000000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00', r2) 17:32:07 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 2: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:07 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'geneve1\x00'}) 17:32:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) prctl$PR_GET_KEEPCAPS(0x7) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)='}:)\x00') socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vivid(&(0x7f0000001280)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000012c0)={0x1, 0x1, @raw_data=[0xfff00000, 0x519, 0x4, 0x7, 0x6, 0x4, 0x3f, 0xbb03, 0xffffffff, 0xa18, 0x80000000, 0x4b, 0x7f, 0x80000000, 0x401, 0xffff]}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000001240)) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x4, 0x74, &(0x7f0000000180)="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", {0x0, 0xffffffff, 0x41414770, 0x5, 0x2, 0x7, 0xa, 0xfffffff9}}) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000001180)) 17:32:07 executing program 1: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 17:32:07 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}]}, 0x38}}, 0x4000800) 17:32:07 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) 17:32:07 executing program 4: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:07 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 2: ioperm(0x0, 0x100, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000013c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34}) ioperm(0x1, 0x9, 0x939) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) socket$inet(0x2, 0x6, 0x5) 17:32:07 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', r0) 17:32:07 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="000000000000fbffffff050000002c00078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="79ce8bd8", @ANYRES32, @ANYBLOB="09000100", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r2, 0xe}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000240)=0x10000) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:07 executing program 4: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:07 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) 17:32:07 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) 17:32:07 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x40) 17:32:07 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @initdev}, &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000000c0)={0x0, 0x1, @stop_pts=0x53}) 17:32:07 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) bind$bt_sco(r3, &(0x7f0000000240)={0x1f, @fixed={[], 0x12}}, 0x8) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x98, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8a0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf7a}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffb}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x8004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00', r6) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x4000000) 17:32:07 executing program 4: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:07 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0, 0x10000}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x3, 0x7, 0x9fb21df6c06d8fbc}) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)=0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @initdev}, &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000000c0)={0x0, 0x1, @stop_pts=0x53}) 17:32:07 executing program 2: ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/208) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40408d0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x880) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000280)) 17:32:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:07 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x81, 0xf5a, 0x201c, 0x8, 0xb, 0x3, 0x1, 0x2}}) 17:32:07 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'syz_tun\x00'}) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x10000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x260043, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 0: ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x1) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:07 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x100) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x10}, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'bond_slave_0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 2: syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0, 0x10000}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x3, 0x7, 0x9fb21df6c06d8fbc}) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x61e000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000280)={'tunl0\x00'}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000000000007d72b039d2973852010644191dbc81dfd17d45a8b8de1c705eb67e72c5a3949f84cba2f8e7"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x40) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00', r1) 17:32:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:07 executing program 0: sched_rr_get_interval(0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 5: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r0 = getpgid(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x6, 0x2, 0x4, 0x45e3, 0x6, 0x7, 0x0, 0x687, 0x9}, 0x0) 17:32:07 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x800, 0x80000) 17:32:07 executing program 4: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:07 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x6df, 0xfffffffb, 0x200c, 0x6, 0xc}}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 0: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:07 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 5: capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x6}) capset(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000080)={0x3, 0xfffffffd, 0x0, 0x1f, 0x4, 0x1}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:08 executing program 4: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:08 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100), 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x1, 0x100, 0x4, {0x5, 0x2, 0x1, 0x40}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000140)=""/220, &(0x7f0000000240)=0xdc) socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x1) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000280)) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) 17:32:08 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x6df, 0xfffffffb, 0x200c, 0x6, 0xc}}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 1: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 1: socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 4: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:08 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x6df, 0xfffffffb, 0x200c, 0x6, 0xc}}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="53467eea0cf6eb8e820ce08237edf8a1c5daf649c758e402abe003c6c10845ba467c5b0e29e9f702f1edba811693e06378903ca27ec7d70aded2dfbd7fbc6a61a48d7ab34100e66559f1005e61f5c5cc0f898b0d9f932b13540fc8c75e799cf8668e25678b08c5ec39ff6da0932140fe4385cc5197dc66ef7c5c8cde129e73", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0x1) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:08 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x7f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="16000000b5d12acf7da77d59bac062dc097e7fe1cb7f5360dbac8cdd6fed5c684fec39dff964c81f579152c47f387f1e0f95d3775ee238b53ca896094b5b5ccdf8dd815e2886b62720bd22b686892fe81703e09a0e769007b322634e4b7bb814a59a31ee04379ed6f631a3", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000"], 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x40040) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r3) 17:32:08 executing program 4: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:08 executing program 5: socket$packet(0x11, 0x3, 0x300) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040005}, 0x40090) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000200)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x40, 0x1, 0x5, 0x7}, {0x101, 0x9, 0x7, 0xfffffffd}, {0xcd30, 0x7, 0x9, 0x4}, {0x5, 0x6, 0xf9, 0x4}, {0x1, 0xff, 0x8}, {0x8001, 0x97, 0x3, 0x5}, {0x9, 0x0, 0x9, 0x2}]}) 17:32:08 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) 17:32:08 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', r0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="bf0200303a1acf255f0b3ce1e6f12100000000000000", @ANYRES16=r1, @ANYBLOB="00002cbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 17:32:08 executing program 4: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:08 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x6df, 0xfffffffb, 0x200c, 0x6, 0xc}}) socket$packet(0x11, 0x3, 0x300) 17:32:08 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x40000) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x3, 0x6}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x7f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="16000000b5d12acf7da77d59bac062dc097e7fe1cb7f5360dbac8cdd6fed5c684fec39dff964c81f579152c47f387f1e0f95d3775ee238b53ca896094b5b5ccdf8dd815e2886b62720bd22b686892fe81703e09a0e769007b322634e4b7bb814a59a31ee04379ed6f631a3", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000"], 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x40040) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r3) 17:32:08 executing program 3: socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xc, 0x8, 0x45e, 0xfffffffb, 0x420, 0x1, 0x401, [], 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x3, 0x300) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2a0000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r1) 17:32:08 executing program 4: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:08 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x6df, 0xfffffffb, 0x200c, 0x6, 0xc}}) 17:32:08 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000280)={0x1, 0x1, [0x4, 0x2, 0x6, 0x8, 0x5e87, 0x7, 0x7, 0xffff0000]}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x8804) 17:32:08 executing program 1: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xffe, 0x1, 0x50313459, 0x6, 0xa, [{0x7f}, {0x4000041, 0x804}, {0x5, 0x2}, {0x41ce}, {0x3, 0x1}, {0x0, 0x9}, {0x40, 0x78a}, {0x936d8c8, 0x7}], 0x7e, 0x42, 0x3, 0x1, 0x2}}) 17:32:08 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:32:08 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:08 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @initdev}, &(0x7f00000000c0)=0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x3, 0x300) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2a0000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r1) 17:32:08 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff, 0xff}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 0: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x10000, 0x0, [], {0x0, @reserved}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) 17:32:08 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:32:08 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:08 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x642080, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @initdev}, &(0x7f00000000c0)=0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/223) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffbff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}]}, 0x38}}, 0x40010) 17:32:08 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:32:08 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="60b6500000000000950000000000000018350000020000000000000e000000ff95d689d3568f00008da62000f0ffffff183b000001000000"], &(0x7f0000000040)='GPL\x00', 0x89f2, 0x2, &(0x7f0000000080)=""/2, 0x41000, 0xc, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x4, 0xf3, 0xfffffff8}, 0x10, 0x24847}, 0x78) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) shmget(0x2, 0x4000, 0x78000280, &(0x7f0000ffb000/0x4000)=nil) 17:32:08 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:08 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:32:08 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff, 0xff}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 5: ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00', r0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00', 0xffffffffffffffff) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x7, &(0x7f0000000040)) 17:32:08 executing program 3: socket$packet(0x11, 0x3, 0x300) clock_getres(0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', r0) 17:32:08 executing program 0: socket$packet(0x11, 0x1, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:08 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff, 0xff}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:32:08 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x642080, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:08 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:08 executing program 5: socket$packet(0x11, 0x3, 0x300) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:09 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa0, 0x0, 0x1082b44858845778, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xfffffffffffffcdd, 0x4, 0x101}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2000080}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x56}]}, 0xa0}}, 0x24000800) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000002c0)={0x0, 0x0, {0x3ff, 0x7fffffff, 0x1, 0x2}}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x402a80, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff, 0xff}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00', 0xffffffffffffffff) 17:32:09 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:32:09 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:09 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000280)={0x1, 0x1, [0x4, 0x2, 0x6, 0x8, 0x5e87, 0x7, 0x7, 0xffff0000]}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x8804) 17:32:09 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff, 0xff}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:32:09 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:09 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa0, 0x0, 0x1082b44858845778, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xfffffffffffffcdd, 0x4, 0x101}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2000080}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x56}]}, 0xa0}}, 0x24000800) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000002c0)={0x0, 0x0, {0x3ff, 0x7fffffff, 0x1, 0x2}}) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x402a80, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00', 0xffffffffffffffff) 17:32:09 executing program 0: socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xc, 0x8, 0x45e, 0xfffffffb, 0x420, 0x1, 0x401, [], 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff, 0xff}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 17:32:09 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82c0200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20008010) 17:32:09 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:09 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff, 0xff}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) 17:32:09 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:09 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:09 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff, 0xff}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:09 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:09 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff, 0xff}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) 17:32:09 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:09 executing program 0: socket$packet(0x11, 0x1, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x33) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:09 executing program 3: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @start={0x80000001}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0x8004510b, &(0x7f0000000080)) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) 17:32:09 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:09 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:09 executing program 2: syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:09 executing program 3: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0x8004510b, &(0x7f0000000080)) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) 17:32:09 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r2) 17:32:09 executing program 3: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:09 executing program 2: syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0x8004510b, &(0x7f0000000080)) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) 17:32:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r2) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:09 executing program 2: syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001, 0x2]}) 17:32:09 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:09 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0x8004510b, &(0x7f0000000080)) 17:32:09 executing program 4: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:09 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r2) 17:32:09 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 17:32:09 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) 17:32:10 executing program 4: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:10 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) 17:32:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 17:32:10 executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:10 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:10 executing program 4: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:10 executing program 0: socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 17:32:10 executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 17:32:10 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:10 executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:10 executing program 0: socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:32:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001, 0x8001]}) 17:32:10 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x4, 0x1, 0x6, {0x10000, 0x3, 0x4, 0x5}}) 17:32:10 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:10 executing program 0: socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2, 0x10001]}) 17:32:10 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) 17:32:10 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000, 0x2]}) 17:32:10 executing program 1: r0 = syz_open_dev$video4linux(0x0, 0x1, 0x80881) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:10 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:10 executing program 0: socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 17:32:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) 17:32:10 executing program 1: r0 = syz_open_dev$video4linux(0x0, 0x1, 0x80881) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5, 0x70000000]}) 17:32:10 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:32:10 executing program 4: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:10 executing program 0: socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:32:10 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:32:10 executing program 1: r0 = syz_open_dev$video4linux(0x0, 0x1, 0x80881) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:10 executing program 0: socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:10 executing program 4: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6, 0x5]}) 17:32:10 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:32:10 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x80881) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:10 executing program 4: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:10 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) 17:32:10 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:10 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:32:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632, 0x6]}) 17:32:10 executing program 4: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:10 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:10 executing program 0: futex(0x0, 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72, 0xb632]}) 17:32:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) 17:32:11 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:32:11 executing program 1: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:11 executing program 4: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:11 executing program 0: futex(0x0, 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:32:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9, 0x72]}) 17:32:11 executing program 1: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:11 executing program 4: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}}}, 0xb8}}, 0x0) 17:32:11 executing program 0: futex(0x0, 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 1: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3, 0x0, 0xaab9]}) 17:32:11 executing program 3: socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:32:11 executing program 0: futex(&(0x7f0000000000), 0x0, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 3: socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, 0x0) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4, 0x3]}) 17:32:11 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:32:11 executing program 0: futex(&(0x7f0000000000), 0x0, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4, 0x4]}) 17:32:11 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, 0x0) 17:32:11 executing program 3: socket$packet(0x11, 0x0, 0x300) futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 0: futex(&(0x7f0000000000), 0x0, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:32:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) 17:32:11 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, 0x0) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7, 0x4]}) 17:32:11 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:32:11 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) socket$packet(0x11, 0x2, 0x300) 17:32:11 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:11 executing program 3: futex(0x0, 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f, 0x7]}) 17:32:11 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:32:11 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 17:32:11 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:11 executing program 3: futex(0x0, 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200, 0x6c4f]}) 17:32:11 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:32:11 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:11 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101, 0x200]}) 17:32:11 executing program 3: futex(0x0, 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:32:11 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:11 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff, 0x101]}) 17:32:11 executing program 3: futex(&(0x7f0000000000), 0x0, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:11 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:11 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x7, [], 0x0}) 17:32:12 executing program 3: futex(&(0x7f0000000000), 0x0, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001, 0xffffffff]}) 17:32:12 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x7, [], 0x0}) 17:32:12 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3, 0x10001]}) 17:32:12 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:32:12 executing program 3: futex(&(0x7f0000000000), 0x0, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:12 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x7, [], 0x0}) 17:32:12 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2, 0x3]}) 17:32:12 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7, 0x2]}) 17:32:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x7, [], &(0x7f00000000c0)}) 17:32:12 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:12 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:32:12 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200, 0x7]}) 17:32:12 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 0: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x0) 17:32:12 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:12 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48, 0x200]}) 17:32:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:32:12 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) 17:32:12 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:12 executing program 5: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff, 0xfc48]}) 17:32:12 executing program 4: ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:12 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfe5d, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x200000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:12 executing program 1: socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2, 0x7fffffff]}) 17:32:12 executing program 4: ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:12 executing program 5: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 0: socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:12 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:32:12 executing program 4: ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7, 0x2]}) 17:32:12 executing program 5: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80881) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x10000, 0x7, [], &(0x7f00000000c0)=0xf7}) 17:32:12 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x0) 17:32:12 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:12 executing program 1: ioperm(0x0, 0x100, 0x0) ioperm(0x0, 0x43, 0x10000) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x3, "6ab2c35eeb77f445f9db6de18b0e1e738604d62a181c2c006efe37901e327b3d", 0x3, 0xffff, 0x2, 0x800000, 0x21, 0x8}) ioperm(0x3, 0x0, 0x2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x109040, 0x0) 17:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000, 0x7]}) 17:32:12 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:12 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:12 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:32:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401, 0x1000]}) 17:32:13 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:32:13 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:13 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:13 executing program 1: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:13 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 17:32:13 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2, 0x401]}) 17:32:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:13 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 17:32:13 executing program 4: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:13 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2, 0x2]}) 17:32:13 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) 17:32:13 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x0) 17:32:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:13 executing program 4: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:13 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) 17:32:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x2]}) 17:32:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffa, 0x4440) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101980, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x9, 0x12f400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000040)=@raw=[@map={0x18, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x0, 0x7, 0xffffffffffffffe0, 0xffffffffffffffed}, @alu={0x7, 0x0, 0xf, 0x8, 0x1, 0x40}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x90, &(0x7f0000000180)=""/144, 0x41100, 0x4, [], 0x0, 0x17, r1, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x49, 0x1}, 0x10, 0x23f06, r2}, 0x78) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:13 executing program 4: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', r0) 17:32:13 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) 17:32:13 executing program 4: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)=0xf7}) 17:32:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffa, 0x4440) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101980, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x9, 0x12f400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000040)=@raw=[@map={0x18, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x0, 0x7, 0xffffffffffffffe0, 0xffffffffffffffed}, @alu={0x7, 0x0, 0xf, 0x8, 0x1, 0x40}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x90, &(0x7f0000000180)=""/144, 0x41100, 0x4, [], 0x0, 0x17, r1, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x49, 0x1}, 0x10, 0x23f06, r2}, 0x78) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data}) 17:32:13 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffa, 0x4440) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101980, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x9, 0x12f400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000040)=@raw=[@map={0x18, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x0, 0x7, 0xffffffffffffffe0, 0xffffffffffffffed}, @alu={0x7, 0x0, 0xf, 0x8, 0x1, 0x40}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x90, &(0x7f0000000180)=""/144, 0x41100, 0x4, [], 0x0, 0x17, r1, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x49, 0x1}, 0x10, 0x23f06, r2}, 0x78) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) 17:32:13 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 3: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', 0xffffffffffffffff) 17:32:13 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, 0x0) 17:32:13 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x5) 17:32:13 executing program 5: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:13 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, 0x0) 17:32:13 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 3: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:13 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) 17:32:13 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, 0x0) 17:32:13 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:13 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x200}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r1) 17:32:13 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@remote, @dev={[], 0x40}, @val={@val={0x9100, 0x7, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "1dd9f840afe87637"}}}}}, 0x26) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) 17:32:13 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) 17:32:13 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], 0x0}) 17:32:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000001f0000000005000000"], 0x14}}, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) 17:32:13 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@remote, @dev={[], 0x40}, @val={@val={0x9100, 0x7, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "1dd9f840afe87637"}}}}}, 0x26) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:13 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:13 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@remote, @dev={[], 0x40}, @val={@val={0x9100, 0x7, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "1dd9f840afe87637"}}}}}, 0x26) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:14 executing program 4: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) fstat(r1, &(0x7f0000000080)) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x401, 0x42, 0xfffffffd, 0x4, 0x7, 0xe1, 0x1, 0x4}}) 17:32:14 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) sched_rr_get_interval(r0, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r2, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:14 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x42040, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/226, &(0x7f0000000180)=0xe2) 17:32:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000200)={0x0, {0x100, 0x4}}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@t) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000100)={0x2, "20bbd3310fe7dca30620ef35c96b92ed68917b44a170766e776d416bc1897d56", 0x2}) ioperm(0x10000000000006, 0xfffc, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240)={0x0, {0x7, 0x20}}) ioperm(0x8, 0x45, 0xfffa) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000000)={0x5, 0x0, [], {0x0, @bt={0x10001, 0x875, 0x0, 0x3, 0x1, 0x4, 0x3, 0x9, 0x4c, 0x4, 0x6, 0x100, 0x1000, 0x9, 0x19, 0xa, {0x1000, 0x5}, 0x0, 0x6}}}) r5 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x1c, 0xffffea88, 0x1007, 0x0, 0x1, 0x6, 0x1}}) 17:32:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:14 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:14 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) prctl$PR_GET_THP_DISABLE(0x2a) 17:32:14 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) 17:32:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 0: openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:14 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:14 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) 17:32:14 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) fstat(r0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc03, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000040)=""/185) 17:32:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 0: openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:14 executing program 2: shmget(0x1, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) 17:32:14 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) 17:32:14 executing program 4: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24044084}, 0x4000) 17:32:14 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) ioperm(0x1ff, 0x96e6, 0x9) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="6520feff090000004d292500e8ffffff1814000038cb0556788de988bd890d862da3357cb7196b5cd58ba9b7861ebe672338ff38b9d88a34b909f023cc97f2a4fd4a25a060cd8ea4554a67e03567d197bbac6355667523c0b671232603d00dbf3f", @ANYRES32=r1, @ANYBLOB="00000000000000002f853000ffffffff8577feffffffffff"], &(0x7f00000003c0)='GPL\x00', 0x3, 0xd7, &(0x7f0000000400)=""/215, 0x40f00, 0x9, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x2, 0xcf}, 0x10, 0x26bc9, r3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r4}, 0x10) 17:32:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 0: openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:14 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) ioperm(0x1ff, 0x96e6, 0x9) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="6520feff090000004d292500e8ffffff1814000038cb0556788de988bd890d862da3357cb7196b5cd58ba9b7861ebe672338ff38b9d88a34b909f023cc97f2a4fd4a25a060cd8ea4554a67e03567d197bbac6355667523c0b671232603d00dbf3f", @ANYRES32=r1, @ANYBLOB="00000000000000002f853000ffffffff8577feffffffffff"], &(0x7f00000003c0)='GPL\x00', 0x3, 0xd7, &(0x7f0000000400)=""/215, 0x40f00, 0x9, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x2, 0xcf}, 0x10, 0x26bc9, r3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r4}, 0x10) 17:32:14 executing program 5: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) ioperm(0x1ff, 0x96e6, 0x9) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="6520feff090000004d292500e8ffffff1814000038cb0556788de988bd890d862da3357cb7196b5cd58ba9b7861ebe672338ff38b9d88a34b909f023cc97f2a4fd4a25a060cd8ea4554a67e03567d197bbac6355667523c0b671232603d00dbf3f", @ANYRES32=r1, @ANYBLOB="00000000000000002f853000ffffffff8577feffffffffff"], &(0x7f00000003c0)='GPL\x00', 0x3, 0xd7, &(0x7f0000000400)=""/215, 0x40f00, 0x9, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x2, 0xcf}, 0x10, 0x26bc9, r3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r4}, 0x10) 17:32:14 executing program 2: ioperm(0x0, 0x100, 0x0) ioperm(0x1, 0x44, 0x10000) ioperm(0x4, 0x1, 0x1000000) socket$inet6(0xa, 0x3, 0x8) 17:32:14 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) ioperm(0x1ff, 0x96e6, 0x9) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="6520feff090000004d292500e8ffffff1814000038cb0556788de988bd890d862da3357cb7196b5cd58ba9b7861ebe672338ff38b9d88a34b909f023cc97f2a4fd4a25a060cd8ea4554a67e03567d197bbac6355667523c0b671232603d00dbf3f", @ANYRES32=r1, @ANYBLOB="00000000000000002f853000ffffffff8577feffffffffff"], &(0x7f00000003c0)='GPL\x00', 0x3, 0xd7, &(0x7f0000000400)=""/215, 0x40f00, 0x9, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x2, 0xcf}, 0x10, 0x26bc9, r3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r4}, 0x10) 17:32:14 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 17:32:14 executing program 4: socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x40000) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:32:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) ioperm(0x1ff, 0x96e6, 0x9) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="6520feff090000004d292500e8ffffff1814000038cb0556788de988bd890d862da3357cb7196b5cd58ba9b7861ebe672338ff38b9d88a34b909f023cc97f2a4fd4a25a060cd8ea4554a67e03567d197bbac6355667523c0b671232603d00dbf3f", @ANYRES32=r1, @ANYBLOB="00000000000000002f853000ffffffff8577feffffffffff"], &(0x7f00000003c0)='GPL\x00', 0x3, 0xd7, &(0x7f0000000400)=""/215, 0x40f00, 0x9, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x2, 0xcf}, 0x10, 0x26bc9, r3}, 0x78) 17:32:14 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 17:32:14 executing program 2: ioperm(0x0, 0x100, 0x0) ioperm(0x1, 0x44, 0x10000) ioperm(0x4, 0x1, 0x1000000) socket$inet6(0xa, 0x3, 0x8) 17:32:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:32:14 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) ioperm(0x1ff, 0x96e6, 0x9) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) 17:32:14 executing program 4: socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x40000) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:32:14 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 17:32:14 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x3fe, 0x67a, 0x8, 0x280, r1, 0x7ff, [], r4, 0xffffffffffffffff, 0xfffffffe, 0x4, 0x6}, 0x40) 17:32:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) ioperm(0x1ff, 0x96e6, 0x9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:14 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x3fe, 0x67a, 0x8, 0x280, r1, 0x7ff, [], r4, 0xffffffffffffffff, 0xfffffffe, 0x4, 0x6}, 0x40) 17:32:14 executing program 2: ioperm(0x0, 0x100, 0x0) ioperm(0x1, 0x44, 0x10000) ioperm(0x4, 0x1, 0x1000000) socket$inet6(0xa, 0x3, 0x8) 17:32:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) ioperm(0x1ff, 0x96e6, 0x9) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:14 executing program 4: socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x40000) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) 17:32:14 executing program 2: ioperm(0x0, 0x100, 0x0) ioperm(0x1, 0x44, 0x10000) socket$inet6(0xa, 0x3, 0x8) 17:32:14 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:14 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x3fe, 0x67a, 0x8, 0x280, r1, 0x7ff, [], r4, 0xffffffffffffffff, 0xfffffffe, 0x4, 0x6}, 0x40) 17:32:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:14 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:14 executing program 2: ioperm(0x0, 0x100, 0x0) socket$inet6(0xa, 0x3, 0x8) 17:32:14 executing program 4: socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x40000) 17:32:14 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) 17:32:14 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:14 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:14 executing program 2: socket$inet6(0xa, 0x3, 0x8) 17:32:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 4: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x40000) 17:32:15 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) 17:32:15 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:15 executing program 2: socket$inet6(0xa, 0x0, 0x8) 17:32:15 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x0, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:15 executing program 4: syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x40000) 17:32:15 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:32:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:15 executing program 2: socket$inet6(0xa, 0x0, 0x8) 17:32:15 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) 17:32:15 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x0, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:15 executing program 4: syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x40000) 17:32:15 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f0000000140)=0xffffffdf) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:15 executing program 2: socket$inet6(0xa, 0x0, 0x8) 17:32:15 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) 17:32:15 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x0, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:15 executing program 4: syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x40000) 17:32:15 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:15 executing program 4: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x40000) 17:32:15 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:15 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) 17:32:15 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x309054e7, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) 17:32:15 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 2: socket$inet6(0xa, 0x3, 0x0) 17:32:15 executing program 4: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x40000) 17:32:15 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:15 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) 17:32:15 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 4: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x40000) 17:32:15 executing program 2: socket$inet6(0xa, 0x3, 0x0) 17:32:15 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:15 executing program 0: socket$inet6(0xa, 0x3, 0x0) 17:32:15 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) getpgrp(0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:15 executing program 4: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x0) 17:32:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) getpgrp(0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 17:32:15 executing program 3: ioperm(0x0, 0x100, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2}) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:15 executing program 2: socket$inet6(0xa, 0x3, 0x0) 17:32:15 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:32:15 executing program 0: socket$inet6(0xa, 0x3, 0x0) 17:32:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:15 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) getpgrp(0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:15 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:32:15 executing program 3: ioperm(0x0, 0x100, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:15 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, 0x0, 0x20) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 17:32:16 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) getpgrp(0xffffffffffffffff) 17:32:16 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:16 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 0: socket$inet6(0xa, 0x3, 0x0) 17:32:16 executing program 5: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) 17:32:16 executing program 3: r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:16 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, 0x0, 0x20) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x5}}) 17:32:16 executing program 3: r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:16 executing program 5: delete_module(&(0x7f0000000000), 0x0) 17:32:16 executing program 2: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) 17:32:16 executing program 3: r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, 0x0, 0x20) 17:32:16 executing program 0: socket$inet6(0xa, 0x0, 0x0) 17:32:16 executing program 5: delete_module(0x0, 0x0) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) 17:32:16 executing program 2: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:16 executing program 3: socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:16 executing program 5: delete_module(0x0, 0x0) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000010c0)=""/4096) 17:32:16 executing program 2: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 0: socket$inet6(0xa, 0x0, 0x0) 17:32:16 executing program 5: delete_module(0x0, 0x0) 17:32:16 executing program 3: socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) getpgrp(0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:16 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 3: socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x4}}, 0x10) 17:32:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) getpgrp(0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 17:32:16 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 0: socket$inet6(0xa, 0x0, 0x0) 17:32:16 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 17:32:16 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 5: prctl$PR_GET_SECCOMP(0x15) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) 17:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) getpgrp(0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 17:32:16 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 17:32:16 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20) [ 586.652831] nbd: must specify a device to reconfigure 17:32:16 executing program 5: prctl$PR_GET_SECCOMP(0x15) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) 17:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) getpgrp(0xffffffffffffffff) 17:32:16 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:16 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:16 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) [ 586.801451] nbd: must specify a device to reconfigure 17:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:16 executing program 4: ioperm(0x0, 0x100, 0x4) delete_module(&(0x7f0000000000), 0x0) 17:32:16 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:17 executing program 5: prctl$PR_GET_SECCOMP(0x15) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) 17:32:17 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:17 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10) 17:32:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:17 executing program 4: delete_module(&(0x7f0000000000), 0x0) 17:32:17 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 17:32:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:17 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10) [ 586.945414] nbd: must specify a device to reconfigure 17:32:17 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:17 executing program 4: delete_module(0x0, 0x0) 17:32:17 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 17:32:17 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10) 17:32:17 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x109001, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x206c, &(0x7f0000000180)=[{0x7, 0x20, 0x7, 0x10001}, {0x7f, 0x9, 0x4, 0x8}, {0x3, 0x40, 0x1f, 0x9}, {0x8000, 0x1f, 0x84, 0x101}, {0x0, 0x1, 0x5, 0x2}, {0x346, 0x40, 0x6, 0x77a2}, {0x4, 0x20, 0x7f, 0x3}]}) 17:32:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:17 executing program 4: delete_module(0x0, 0x0) 17:32:17 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) [ 587.125169] nbd: must specify a device to reconfigure 17:32:17 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:17 executing program 0: ioperm(0x0, 0x100, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) time(&(0x7f0000000080)) keyctl$clear(0x7, r0) 17:32:17 executing program 4: delete_module(0x0, 0x0) 17:32:17 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 17:32:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:17 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x0, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) 17:32:17 executing program 4: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00', r0) 17:32:17 executing program 0 (fault-call:0 fault-nth:0): delete_module(&(0x7f0000000000), 0x0) 17:32:17 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) [ 587.293772] nbd: must specify a device to reconfigure 17:32:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:17 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:17 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x0, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) [ 587.380541] nbd: must specify a device to reconfigure [ 587.389747] FAULT_INJECTION: forcing a failure. [ 587.389747] name failslab, interval 1, probability 0, space 0, times 0 17:32:17 executing program 3: prctl$PR_GET_FP_MODE(0x2e) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x0, 0x1, 0x1}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0xc}, 0x10) 17:32:17 executing program 4 (fault-call:0 fault-nth:0): socket$inet6(0xa, 0x3, 0x0) [ 587.427010] nbd: must specify a device to reconfigure 17:32:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:17 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x0, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x47524247}) [ 587.455174] CPU: 1 PID: 4481 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 587.463624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.474432] Call Trace: [ 587.477028] dump_stack+0x1b2/0x281 [ 587.480662] should_fail.cold+0x10a/0x149 [ 587.484818] should_failslab+0xd6/0x130 [ 587.489056] kmem_cache_alloc+0x28e/0x3c0 [ 587.493220] __anon_vma_prepare+0x5d/0x4f0 [ 587.497951] ? __lock_acquire+0x5fc/0x3f20 [ 587.502721] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 587.508890] ? prep_transhuge_page+0xa0/0xa0 [ 587.513316] __handle_mm_fault+0x2ac4/0x4620 [ 587.518515] ? vm_insert_page+0x7c0/0x7c0 [ 587.523389] ? _copy_from_user+0x96/0x100 [ 587.526098] FAULT_INJECTION: forcing a failure. [ 587.526098] name failslab, interval 1, probability 0, space 0, times 0 [ 587.527553] handle_mm_fault+0x391/0x860 [ 587.527570] __do_page_fault+0x549/0xad0 [ 587.527589] ? spurious_fault+0x640/0x640 17:32:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) [ 587.555703] ? do_page_fault+0x60/0x500 [ 587.560227] page_fault+0x25/0x50 [ 587.563861] RIP: 0010:strncpy_from_user+0x18c/0x2c0 [ 587.570889] RSP: 0018:ffff88809913fe18 EFLAGS: 00010246 [ 587.577138] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005d2c000 [ 587.584409] RDX: 000000000000003c RSI: ffffffff832878ca RDI: ffff88809499fb18 [ 587.592422] RBP: 0000000020000000 R08: 0000000000000001 R09: ffffed1013227fd5 [ 587.599874] R10: ffff88809913feae R11: 0000000000000000 R12: 0000000000000037 [ 587.608380] R13: ffff88809913fe78 R14: 0000000020000037 R15: dffffc0000000000 [ 587.615787] ? strncpy_from_user+0x18a/0x2c0 [ 587.620731] ? strncpy_from_user+0x18a/0x2c0 [ 587.625165] SyS_delete_module+0x85/0x490 [ 587.629421] ? free_module+0xb10/0xb10 [ 587.633308] ? SyS_write+0x14d/0x210 [ 587.637015] ? SyS_read+0x210/0x210 [ 587.640637] ? __do_page_fault+0x159/0xad0 [ 587.644878] ? do_syscall_64+0x4c/0x640 [ 587.648886] ? free_module+0xb10/0xb10 [ 587.652919] do_syscall_64+0x1d5/0x640 [ 587.656820] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 587.662039] RIP: 0033:0x465ef9 [ 587.665231] RSP: 002b:00007fb37a88f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000b0 [ 587.672948] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 587.680228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 587.687639] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 587.694914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:32:17 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x376b, 0x80002) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x4000) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0x324) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x80000001) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) [ 587.702190] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 [ 587.735841] CPU: 0 PID: 4495 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 587.743681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.753595] Call Trace: [ 587.753615] dump_stack+0x1b2/0x281 [ 587.753632] should_fail.cold+0x10a/0x149 [ 587.753646] should_failslab+0xd6/0x130 [ 587.753659] kmem_cache_alloc+0x28e/0x3c0 [ 587.753672] ? sock_destroy_inode+0x60/0x60 [ 587.753682] sock_alloc_inode+0x19/0x250 [ 587.753692] ? sock_destroy_inode+0x60/0x60 [ 587.753703] alloc_inode+0x5d/0x170 [ 587.753714] new_inode_pseudo+0x14/0xe0 [ 587.753724] sock_alloc+0x3c/0x270 [ 587.753736] __sock_create+0x8a/0x620 [ 587.753751] SyS_socket+0xd1/0x1b0 [ 587.753763] ? move_addr_to_kernel+0x60/0x60 [ 587.753773] ? __do_page_fault+0x159/0xad0 [ 587.753789] ? do_syscall_64+0x4c/0x640 [ 587.753802] ? move_addr_to_kernel+0x60/0x60 [ 587.821290] do_syscall_64+0x1d5/0x640 [ 587.821309] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 587.831274] RIP: 0033:0x465ef9 17:32:17 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) write$proc_mixer(r1, &(0x7f0000000040)=[{'CD', @void}, {'CD', @val={' \'', 'Line Capture', '\' '}}], 0x2a) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100), 0x9, 0x2, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0), 0x1) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f00000000c0)=0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x7, 0x4) [ 587.834464] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 587.842180] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 587.849773] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a [ 587.857135] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 [ 587.864507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.871795] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 17:32:18 executing program 0 (fault-call:0 fault-nth:1): delete_module(&(0x7f0000000000), 0x0) 17:32:18 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) 17:32:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:18 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) [ 587.902627] socket: no more sockets 17:32:18 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r1 = getpgrp(0x0) r2 = shmget(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x54202, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) r5 = getpgrp(r1) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000240)={&(0x7f00000001c0)="2000d523a1893bdca3d0d488f5d105ba08ffefcc55f3f0fe0092a51ae28ae7f79dc6ddc96516b656f9839cf0d2feb6a5440e35d7035ba234d72af74c289ab1d86a758e7bff5077ea543fa05732227026e7b0eff3f07ec4f6bea6", 0x5a}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x1000) sched_rr_get_interval(r1, &(0x7f0000000000)) 17:32:18 executing program 4 (fault-call:0 fault-nth:1): socket$inet6(0xa, 0x3, 0x0) 17:32:18 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) 17:32:18 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) [ 587.976935] nbd: must specify a device to reconfigure [ 587.989782] FAULT_INJECTION: forcing a failure. [ 587.989782] name failslab, interval 1, probability 0, space 0, times 0 [ 587.995036] FAULT_INJECTION: forcing a failure. [ 587.995036] name failslab, interval 1, probability 0, space 0, times 0 [ 588.053419] CPU: 1 PID: 4529 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 588.061265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.070630] Call Trace: [ 588.073226] dump_stack+0x1b2/0x281 [ 588.076856] should_fail.cold+0x10a/0x149 [ 588.081005] should_failslab+0xd6/0x130 [ 588.084986] kmem_cache_alloc+0x28e/0x3c0 [ 588.089139] __anon_vma_prepare+0x2bc/0x4f0 [ 588.093459] ? __lock_acquire+0x5fc/0x3f20 [ 588.097801] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 588.102908] ? prep_transhuge_page+0xa0/0xa0 [ 588.107324] __handle_mm_fault+0x2ac4/0x4620 [ 588.111765] ? vm_insert_page+0x7c0/0x7c0 [ 588.115907] ? _copy_from_user+0x96/0x100 [ 588.120066] handle_mm_fault+0x391/0x860 [ 588.124159] __do_page_fault+0x549/0xad0 [ 588.128228] ? spurious_fault+0x640/0x640 [ 588.132377] ? do_page_fault+0x60/0x500 [ 588.136393] page_fault+0x25/0x50 [ 588.139848] RIP: 0010:strncpy_from_user+0x18c/0x2c0 [ 588.144853] RSP: 0018:ffff8880aa51fe18 EFLAGS: 00010246 [ 588.150211] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005d2c000 [ 588.157477] RDX: 000000000000003c RSI: ffffffff832878ca RDI: ffff8880b37cd5d8 [ 588.165633] RBP: 0000000020000000 R08: 0000000000000001 R09: ffffed10154a3fd5 [ 588.172911] R10: ffff8880aa51feae R11: 0000000000000000 R12: 0000000000000037 [ 588.180206] R13: ffff8880aa51fe78 R14: 0000000020000037 R15: dffffc0000000000 [ 588.187489] ? strncpy_from_user+0x18a/0x2c0 [ 588.191921] ? strncpy_from_user+0x18a/0x2c0 [ 588.193380] nbd: must specify a device to reconfigure 17:32:18 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101803, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) [ 588.196336] SyS_delete_module+0x85/0x490 [ 588.196347] ? free_module+0xb10/0xb10 [ 588.196362] ? SyS_write+0x14d/0x210 [ 588.213389] ? SyS_read+0x210/0x210 [ 588.217019] ? __do_page_fault+0x159/0xad0 [ 588.221387] ? do_syscall_64+0x4c/0x640 [ 588.225475] ? free_module+0xb10/0xb10 [ 588.229365] do_syscall_64+0x1d5/0x640 [ 588.233379] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 588.238595] RIP: 0033:0x465ef9 [ 588.241866] RSP: 002b:00007fb37a88f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000b0 17:32:18 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x80000001, 0x4) socket$tipc(0x1e, 0x2, 0x0) 17:32:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20) [ 588.249582] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 588.256888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 588.264179] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 588.271452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.278725] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 [ 588.295621] CPU: 0 PID: 4531 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 588.303481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.312841] Call Trace: [ 588.315444] dump_stack+0x1b2/0x281 [ 588.319093] should_fail.cold+0x10a/0x149 [ 588.323258] should_failslab+0xd6/0x130 [ 588.327240] kmem_cache_alloc_trace+0x29a/0x3d0 [ 588.331910] ? kmem_cache_alloc+0x35f/0x3c0 [ 588.336241] sock_alloc_inode+0x5f/0x250 [ 588.340312] ? sock_destroy_inode+0x60/0x60 [ 588.344648] alloc_inode+0x5d/0x170 [ 588.348280] new_inode_pseudo+0x14/0xe0 [ 588.352261] sock_alloc+0x3c/0x270 [ 588.355813] __sock_create+0x8a/0x620 [ 588.359646] SyS_socket+0xd1/0x1b0 [ 588.363194] ? move_addr_to_kernel+0x60/0x60 [ 588.367604] ? __do_page_fault+0x159/0xad0 [ 588.371847] ? do_syscall_64+0x4c/0x640 [ 588.375830] ? move_addr_to_kernel+0x60/0x60 [ 588.380330] do_syscall_64+0x1d5/0x640 [ 588.384228] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 588.389441] RIP: 0033:0x465ef9 [ 588.392633] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 17:32:18 executing program 0 (fault-call:0 fault-nth:2): delete_module(&(0x7f0000000000), 0x0) 17:32:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:18 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:18 executing program 2: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'b', ' *:* ', 'rm\x00'}, 0x9) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) [ 588.400348] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 588.407618] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a [ 588.414892] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 [ 588.422169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.429446] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 17:32:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20) [ 588.513371] FAULT_INJECTION: forcing a failure. [ 588.513371] name failslab, interval 1, probability 0, space 0, times 0 [ 588.525511] CPU: 0 PID: 4562 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 588.533318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.542677] Call Trace: [ 588.545278] dump_stack+0x1b2/0x281 [ 588.548925] should_fail.cold+0x10a/0x149 [ 588.553085] should_failslab+0xd6/0x130 [ 588.557078] kmem_cache_alloc+0x28e/0x3c0 [ 588.561251] __khugepaged_enter+0x32/0x330 [ 588.565585] do_huge_pmd_anonymous_page+0xd61/0x1700 [ 588.570705] ? prep_transhuge_page+0xa0/0xa0 [ 588.575125] __handle_mm_fault+0x2ac4/0x4620 [ 588.579567] ? vm_insert_page+0x7c0/0x7c0 [ 588.583824] ? _copy_from_user+0x96/0x100 [ 588.587985] handle_mm_fault+0x391/0x860 [ 588.592053] __do_page_fault+0x549/0xad0 [ 588.596123] ? spurious_fault+0x640/0x640 [ 588.600279] ? do_page_fault+0x60/0x500 [ 588.604262] page_fault+0x25/0x50 [ 588.607720] RIP: 0010:strncpy_from_user+0x18c/0x2c0 [ 588.612733] RSP: 0018:ffff8880a234fe18 EFLAGS: 00010246 [ 588.618095] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005d2c000 [ 588.624280] nbd: must specify a device to reconfigure [ 588.625544] RDX: 000000000000003c RSI: ffffffff832878ca RDI: ffff888092f3f718 [ 588.638004] RBP: 0000000020000000 R08: 0000000000000001 R09: ffffed1014469fd5 [ 588.645451] R10: ffff8880a234feae R11: 0000000000000000 R12: 0000000000000037 [ 588.652732] R13: ffff8880a234fe78 R14: 0000000020000037 R15: dffffc0000000000 17:32:18 executing program 4 (fault-call:0 fault-nth:2): socket$inet6(0xa, 0x3, 0x0) 17:32:18 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) 17:32:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:18 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000001200)={0xc, 0x20, &(0x7f00000001c0)="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", {0xfff, 0x7, 0x32435750, 0x3, 0x5, 0x58, 0xa, 0x100}}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000100)={0xdd, 0x1, &(0x7f0000000040)="2d2d30ff514e10092977aabc6b02f715489458663c7a4ac4f1ddd19aff827fcc12fcf4676cdf400993b2fcc1dd7f9b50b20d63150038e40240af8007a7c3fda45499435367b74ced642535f37c6ac2e772cc3579e3733385cf80f509d9a0e360be464ea38c042d592236c31750a73cc0afd6ef59dccb851ec9df812987554c03dee7e0c33f5d", {0x9, 0x7, 0x3032344d, 0x3, 0x6, 0x4, 0xa, 0x8001}}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x111000) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x200, 0x1, 0x0, "90e562ebbc79d2db237a824ff203a001001e1ba4a508668a2d2a8c60c90400"}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) [ 588.660021] ? strncpy_from_user+0x18a/0x2c0 [ 588.660883] socket: no more sockets [ 588.664446] ? strncpy_from_user+0x18a/0x2c0 [ 588.664461] SyS_delete_module+0x85/0x490 [ 588.664472] ? free_module+0xb10/0xb10 [ 588.664482] ? SyS_write+0x14d/0x210 [ 588.664493] ? SyS_read+0x210/0x210 [ 588.664503] ? __do_page_fault+0x159/0xad0 [ 588.664519] ? do_syscall_64+0x4c/0x640 [ 588.696148] ? free_module+0xb10/0xb10 [ 588.700044] do_syscall_64+0x1d5/0x640 [ 588.703949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 588.709141] RIP: 0033:0x465ef9 [ 588.712331] RSP: 002b:00007fb37a88f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000b0 [ 588.720080] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 588.727354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 588.734651] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 588.741926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.746592] FAULT_INJECTION: forcing a failure. [ 588.746592] name failslab, interval 1, probability 0, space 0, times 0 [ 588.749315] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 17:32:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:18 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xfffffffd, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x20) 17:32:18 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:18 executing program 0 (fault-call:0 fault-nth:3): delete_module(&(0x7f0000000000), 0x0) 17:32:18 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x14) r0 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 588.860413] nbd: must specify a device to reconfigure [ 588.873656] FAULT_INJECTION: forcing a failure. [ 588.873656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.885270] CPU: 1 PID: 4584 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 588.893374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.902744] Call Trace: [ 588.905360] dump_stack+0x1b2/0x281 [ 588.908999] should_fail.cold+0x10a/0x149 [ 588.913155] should_failslab+0xd6/0x130 [ 588.917161] kmem_cache_alloc_trace+0x29a/0x3d0 [ 588.921838] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 588.927499] __request_module+0x1f6/0x900 [ 588.931681] ? inet6_create+0xb28/0xe20 [ 588.935654] ? free_modprobe_argv+0x90/0x90 [ 588.939971] ? trace_hardirqs_on+0x10/0x10 [ 588.944205] ? get_pid_task+0xb8/0x130 [ 588.948088] ? trace_hardirqs_on+0x10/0x10 [ 588.952314] ? fs_reclaim_release+0xd0/0x110 [ 588.956738] ? inet6_create+0x8d0/0xe20 [ 588.960711] ? lock_acquire+0x170/0x3f0 [ 588.964681] ? lock_downgrade+0x740/0x740 [ 588.968849] inet6_create+0xb28/0xe20 [ 588.972659] __sock_create+0x303/0x620 [ 588.976566] SyS_socket+0xd1/0x1b0 [ 588.980102] ? move_addr_to_kernel+0x60/0x60 [ 588.984522] ? __do_page_fault+0x159/0xad0 [ 588.988757] ? do_syscall_64+0x4c/0x640 [ 588.992744] ? move_addr_to_kernel+0x60/0x60 [ 588.997164] do_syscall_64+0x1d5/0x640 [ 589.001049] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.006228] RIP: 0033:0x465ef9 17:32:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:19 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1000, 0x101901) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) [ 589.009409] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 589.017108] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 589.024375] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a [ 589.033730] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.041025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.048296] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 [ 589.055731] CPU: 0 PID: 4603 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 589.063570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.072928] Call Trace: [ 589.075524] dump_stack+0x1b2/0x281 [ 589.079162] should_fail.cold+0x10a/0x149 [ 589.083324] __alloc_pages_nodemask+0x22c/0x2720 [ 589.088118] ? trace_hardirqs_on+0x10/0x10 [ 589.092374] ? trace_hardirqs_on+0x10/0x10 [ 589.096614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 589.101463] ? __lock_acquire+0x5fc/0x3f20 [ 589.105713] ? __khugepaged_enter+0x24c/0x330 17:32:19 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000140)=0x40) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000000)) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 589.110307] ? lock_acquire+0x170/0x3f0 [ 589.114294] ? lock_downgrade+0x740/0x740 [ 589.118456] alloc_pages_current+0x155/0x260 [ 589.123131] pte_alloc_one+0x15/0x100 [ 589.126942] do_huge_pmd_anonymous_page+0x500/0x1700 [ 589.132068] ? prep_transhuge_page+0xa0/0xa0 [ 589.136523] __handle_mm_fault+0x2ac4/0x4620 [ 589.141380] ? vm_insert_page+0x7c0/0x7c0 [ 589.145536] ? _copy_from_user+0x96/0x100 [ 589.149712] handle_mm_fault+0x391/0x860 [ 589.153892] __do_page_fault+0x549/0xad0 [ 589.157967] ? spurious_fault+0x640/0x640 [ 589.162124] ? do_page_fault+0x60/0x500 [ 589.166104] page_fault+0x25/0x50 [ 589.169562] RIP: 0010:strncpy_from_user+0x18c/0x2c0 [ 589.174621] RSP: 0018:ffff888075a97e18 EFLAGS: 00010246 [ 589.179990] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005d2c000 [ 589.187265] RDX: 000000000000003c RSI: ffffffff832878ca RDI: ffff8880a31db7d8 [ 589.194536] RBP: 0000000020000000 R08: 0000000000000001 R09: ffffed100eb52fd5 [ 589.201806] R10: ffff888075a97eae R11: 0000000000000000 R12: 0000000000000037 [ 589.209079] R13: ffff888075a97e78 R14: 0000000020000037 R15: dffffc0000000000 [ 589.216456] ? strncpy_from_user+0x18a/0x2c0 [ 589.220886] ? strncpy_from_user+0x18a/0x2c0 [ 589.225306] SyS_delete_module+0x85/0x490 [ 589.229613] ? free_module+0xb10/0xb10 [ 589.233878] ? SyS_write+0x14d/0x210 [ 589.233890] ? SyS_read+0x210/0x210 [ 589.233906] ? __do_page_fault+0x159/0xad0 [ 589.245678] ? do_syscall_64+0x4c/0x640 [ 589.249676] ? free_module+0xb10/0xb10 [ 589.253669] do_syscall_64+0x1d5/0x640 17:32:19 executing program 4 (fault-call:0 fault-nth:3): socket$inet6(0xa, 0x3, 0x0) 17:32:19 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x800, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x210a42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r2}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000088a20000bb9f91ac428e788c779bb1a3dd0992987842abf2b83548e7d4eea20000d24b3d33aaca54bb1b65e86632ea14316b5300e9719871f156188a0ef446"], 0x41) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x2}}}, 0x10) 17:32:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20) 17:32:19 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:19 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2, 0xa, 0x1, "4b5f27e431d878b5fc19218facb3dc9a90f403aff5437877a6a7ff5fbb639e72", 0x4332217b}) [ 589.257906] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.257918] RIP: 0033:0x465ef9 [ 589.266471] RSP: 002b:00007fb37a88f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000b0 [ 589.274180] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 589.281445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 589.288724] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.296017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.303272] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 17:32:19 executing program 0 (fault-call:0 fault-nth:4): delete_module(&(0x7f0000000000), 0x0) 17:32:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x20) 17:32:19 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f00000001c0)={0x40, 0xe, &(0x7f0000000140)="2ddc11c65a21b53f620a99df30b1a226acb4677dd78a3175ffbb421948014c13f5969db3a63f780ca33b75923f9c71d7cc7a7580e3c482bbd551d7584bb4aa2f779acc7756982dc31fb14441253c19fdf5c3ca43ca3b92b72ae8e76d1bfef1529a48f35740fb3ac9b22686366ec83562343a3227a8d1", {0xffffffc1, 0xffff3326, 0x56555959, 0x3, 0x200, 0x6, 0x4, 0xf93}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10081, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000019100)=""/102385, &(0x7f00000000c0)=0x18ff1) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) [ 589.362407] FAULT_INJECTION: forcing a failure. [ 589.362407] name failslab, interval 1, probability 0, space 0, times 0 [ 589.414601] CPU: 0 PID: 4629 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 589.422439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.423329] nbd: must specify a device to reconfigure [ 589.431798] Call Trace: [ 589.431820] dump_stack+0x1b2/0x281 [ 589.431836] should_fail.cold+0x10a/0x149 [ 589.431849] should_failslab+0xd6/0x130 [ 589.431862] __kmalloc_track_caller+0x2bc/0x400 [ 589.431875] ? __request_module+0x214/0x900 [ 589.444136] FAULT_INJECTION: forcing a failure. [ 589.444136] name failslab, interval 1, probability 0, space 0, times 0 [ 589.447393] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 589.447409] kstrdup+0x36/0x70 [ 589.447420] __request_module+0x214/0x900 [ 589.447436] ? inet6_create+0xb28/0xe20 [ 589.488026] ? free_modprobe_argv+0x90/0x90 [ 589.492373] ? trace_hardirqs_on+0x10/0x10 [ 589.496643] ? get_pid_task+0xb8/0x130 [ 589.500537] ? trace_hardirqs_on+0x10/0x10 [ 589.504800] ? fs_reclaim_release+0xd0/0x110 [ 589.509219] ? inet6_create+0x8d0/0xe20 [ 589.513199] ? lock_acquire+0x170/0x3f0 [ 589.517173] ? lock_downgrade+0x740/0x740 [ 589.521325] inet6_create+0xb28/0xe20 [ 589.525142] __sock_create+0x303/0x620 [ 589.529042] SyS_socket+0xd1/0x1b0 [ 589.532586] ? move_addr_to_kernel+0x60/0x60 [ 589.537083] ? __do_page_fault+0x159/0xad0 [ 589.541346] ? do_syscall_64+0x4c/0x640 [ 589.545326] ? move_addr_to_kernel+0x60/0x60 [ 589.549737] do_syscall_64+0x1d5/0x640 [ 589.553633] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.558825] RIP: 0033:0x465ef9 [ 589.562013] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 589.569726] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 589.576993] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a [ 589.584262] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.591546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.599254] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 [ 589.606546] CPU: 1 PID: 4640 Comm: syz-executor.0 Not tainted 4.14.221-syzkaller #0 [ 589.614355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.623713] Call Trace: [ 589.626314] dump_stack+0x1b2/0x281 [ 589.629949] should_fail.cold+0x10a/0x149 [ 589.634108] should_failslab+0xd6/0x130 [ 589.638090] kmem_cache_alloc+0x28e/0x3c0 [ 589.642344] ptlock_alloc+0x1d/0x70 [ 589.645979] pte_alloc_one+0x57/0x100 [ 589.649874] do_huge_pmd_anonymous_page+0x500/0x1700 [ 589.654994] ? prep_transhuge_page+0xa0/0xa0 [ 589.659412] __handle_mm_fault+0x2ac4/0x4620 17:32:19 executing program 4 (fault-call:0 fault-nth:4): socket$inet6(0xa, 0x3, 0x0) [ 589.663829] ? vm_insert_page+0x7c0/0x7c0 [ 589.667993] ? _copy_from_user+0x96/0x100 [ 589.672186] handle_mm_fault+0x391/0x860 [ 589.676256] __do_page_fault+0x549/0xad0 [ 589.680328] ? spurious_fault+0x640/0x640 [ 589.684479] ? do_page_fault+0x60/0x500 [ 589.688466] page_fault+0x25/0x50 [ 589.691921] RIP: 0010:strncpy_from_user+0x18c/0x2c0 [ 589.696932] RSP: 0018:ffff8880b1a0fe18 EFLAGS: 00010246 [ 589.702296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005d2c000 [ 589.709574] RDX: 000000000000003c RSI: ffffffff832878ca RDI: ffff888092c11818 [ 589.709594] FAULT_INJECTION: forcing a failure. [ 589.709594] name failslab, interval 1, probability 0, space 0, times 0 [ 589.716858] RBP: 0000000020000000 R08: 0000000000000001 R09: ffffed1016341fd5 [ 589.716864] R10: ffff8880b1a0feae R11: 0000000000000000 R12: 0000000000000037 [ 589.716870] R13: ffff8880b1a0fe78 R14: 0000000020000037 R15: dffffc0000000000 [ 589.716891] ? strncpy_from_user+0x18a/0x2c0 [ 589.716904] ? strncpy_from_user+0x18a/0x2c0 [ 589.716926] SyS_delete_module+0x85/0x490 17:32:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x20) [ 589.762948] ? free_module+0xb10/0xb10 [ 589.766921] ? SyS_write+0x14d/0x210 [ 589.770630] ? SyS_read+0x210/0x210 [ 589.774266] ? __do_page_fault+0x159/0xad0 [ 589.778505] ? do_syscall_64+0x4c/0x640 [ 589.782490] ? free_module+0xb10/0xb10 [ 589.786386] do_syscall_64+0x1d5/0x640 [ 589.790286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.795486] RIP: 0033:0x465ef9 [ 589.798723] RSP: 002b:00007fb37a88f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000b0 [ 589.806452] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 589.813728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 589.821000] RBP: 00007fb37a88f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.828270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.835543] R13: 00007ffdc97e9c9f R14: 00007fb37a88f300 R15: 0000000000022000 [ 589.842834] CPU: 0 PID: 4658 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 589.850730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.860526] Call Trace: [ 589.863163] dump_stack+0x1b2/0x281 17:32:20 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) [ 589.866803] should_fail.cold+0x10a/0x149 [ 589.870958] should_failslab+0xd6/0x130 [ 589.875129] kmem_cache_alloc_trace+0x29a/0x3d0 [ 589.879827] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 589.884852] ? dec_ucount+0x120/0x120 [ 589.888662] call_usermodehelper_setup+0x73/0x2e0 [ 589.893513] __request_module+0x30f/0x900 [ 589.897776] ? inet6_create+0xb28/0xe20 [ 589.901781] ? free_modprobe_argv+0x90/0x90 [ 589.906109] ? trace_hardirqs_on+0x10/0x10 [ 589.910347] ? get_pid_task+0xb8/0x130 17:32:20 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x10) [ 589.914265] ? trace_hardirqs_on+0x10/0x10 [ 589.918861] ? fs_reclaim_release+0xd0/0x110 [ 589.923280] ? inet6_create+0x8d0/0xe20 [ 589.927261] ? lock_acquire+0x170/0x3f0 [ 589.931237] ? lock_downgrade+0x740/0x740 [ 589.935395] inet6_create+0xb28/0xe20 [ 589.939204] __sock_create+0x303/0x620 [ 589.943101] SyS_socket+0xd1/0x1b0 [ 589.946646] ? move_addr_to_kernel+0x60/0x60 [ 589.951056] ? __do_page_fault+0x159/0xad0 [ 589.955423] ? do_syscall_64+0x4c/0x640 [ 589.959414] ? move_addr_to_kernel+0x60/0x60 17:32:20 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'xfrm0\x00'}) 17:32:20 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000140)={0xc, {0x2, 0x1, 0x4, 0x5c8}}) [ 589.964011] do_syscall_64+0x1d5/0x640 [ 589.967923] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.973226] RIP: 0033:0x465ef9 [ 589.976505] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 589.984909] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 589.992183] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a [ 589.999456] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 [ 590.006734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:32:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 17:32:20 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:20 executing program 0 (fault-call:0 fault-nth:5): delete_module(&(0x7f0000000000), 0x0) [ 590.014027] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 17:32:20 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000040)=0x8) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) 17:32:20 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) [ 590.083349] nbd: must specify a device to reconfigure 17:32:20 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) lookup_dcookie(0xfff, &(0x7f0000000000)=""/22, 0x16) 17:32:20 executing program 4 (fault-call:0 fault-nth:5): socket$inet6(0xa, 0x3, 0x0) 17:32:20 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) delete_module(&(0x7f0000000000), 0x0) 17:32:20 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0xc, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1ba4a500668afcff8cb12460c90400", 0x34325842}) 17:32:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 590.156884] nbd: must specify a device to reconfigure 17:32:20 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:20 executing program 3: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0x5, 0x100, 0x5, {0x8, 0x2, 0x2, 0x1}}) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 17:32:20 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000040)={0x8255, "74fe9bdf9e967c28ec6069ccf1b6b5aa565e44e2fed23053e6862150a3571d98", 0x1, 0x5, 0x3, 0x1, 0x1, 0x2}) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) 17:32:20 executing program 0: delete_module(&(0x7f0000000400)='\xa9\x8d\xfdl<\'\xcdW\x18t:\x84\x9cn\x06\x8f\x14\xbf\xb7\xdb\xc8\xc5\xcb\xed^q\xf3F@\xf8\x12[\x82\tz\xd9\xfclk\xda\x8e\x9a\x93\x168q\xa2\x91\\\xf7\xf8>\"\x8f\xc7\xc5X\x9a\x16h\x9e\x9b\n\x8a\xc0\xd2\r\nJ&\xc3\xa0F\x94\xe4\x85\x1fz?\xa0\xd4XNA\xb5G}JM\xff\xa3\xde9\xa2\xfb\x05\xb99\x8f\xda\xf9\xdf\xac!\x89A\x02)oN\xd4\x8b%n\xd3)4\xf0\xe0X&\xf4P\x0f\xe8c\xcaK\xa8y8\xe6I\xd0\xc9$\xd34T\xe6\x13\x80}4\x03\x8fU\xf8\xdf%\xbf\x14\nN\xeakm\xc2\n\xa1wz\xdd\x14P\xa2\xd7\x9d@\x1f_\xcb{H\xb6\xae\x16\xe1\x1b\xdeGA)6\x18\x8c\x10\x87\xfca\xd3\xe4\x86E\xe0\xf9\v[\xf9\x04qq\x17+m\xce\xa2\xca\xa21\xf2\xf4\xdd\xeb:\xe6L\x88C\x0e\xc6\x03\vN`\xc2\xa0+~\x0fD\xee\xf5~\xafk>w~\xb61\x90\xeeO\x96\x10\x17\xe8bi\x85)w\xca\xc0>\xdaM\xb7\xef\x93\xe8\x90\xf3\xab*vL\t\x91\xede \x14\x9bO:u\xd7\xfdu=X\xa8\x85\x81\aZ\xd1\x1c3p|{7[\xc6\xdf\x93I\x1d\x94\xd8\x93kz\x87\xc2\x10l\xa2\xfa\xad\xe9\xb6\x19s\xbc\xb7v\xf6\xe7\xca\xa3$\xf7\xc1\xd3\x1e)\xdf43\xe6;\x87Y\xbd\xe76\x1e\xe6\x99\xb8R\x94p\x14\x8e#<=\x1a\x15\xbd/a\xbc#?<;\xc3?hCe\xde\x8a\xaf\x83lW\x04\xb3\xca\x11\n\xb8]\x11\xfe\xef\xa5\x99\x0e}\x9aS6\xe2\xc8\x8f\xdb\xded\xe7\x8a\xfd\aJ\xe4`\t\xaa\xdbv\xc4L\xd10\x95\x81UL*h\xe3\x9a\b(b\x7f\xd6V\x96]D7\xea\xfec\xd0|\xa4\xb6\xf5Vy-\x9bEkI|}n\x7f\xd8,#\xf6u\xc4\xeb\xce_\xba[\xae\xb9\xb0\\\x14\x19\x7f[\xcbT\x99\xeb\xe1\xc5JL[\x0e}\xf5\xc0\x0f\xefb\x18\xc6<`\f\xc3U\x16A\xdd4ju\xc0\xf9\xb9\x16?\xc6l\xa8|\x8e2\f\xff\x91%\x1c\xfa\x15\n\xd2d\xbc\xac\xc1\x96\x971\xe3\x94\x98\xeb\x11\xee\xe3\xb4\x11q!\xd8\xa7j\xc0n\xe9\xb8^\xcd\x1d\xf8\a\x84\xa11F\x9a\xfa\x8e6y\xeb5g\xc5\xdf\xed\xb5U9\xa7s\x86\x81%\xae\x98\x9f\xe4E<\x96k8\xba\xe5y\xab\xe9\xaf\f\xe2\xa8\xf33K\x82\xca\x10H\x88:\xee\xe7\x87L\x00\xc6\xcdG(\xe2U\x9f\xab\x84\xbb\x82xO\xd5\x9b\xcb\x8bj\x1bI\x00\x00\x00\x00\x00\x00\x15\x19\x88\x05\x81y\xe0\xaa\xf3\xebEJ\x00\x95Q\x972Xu\x92!', 0x600) delete_module(&(0x7f0000000000)='$)+\x00', 0x800) ioperm(0x6, 0x0, 0x45a) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/13) [ 590.266624] nbd: must specify a device to reconfigure [ 590.276695] FAULT_INJECTION: forcing a failure. [ 590.276695] name failslab, interval 1, probability 0, space 0, times 0 [ 590.315082] CPU: 1 PID: 4706 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 590.322917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.332286] Call Trace: [ 590.334879] dump_stack+0x1b2/0x281 [ 590.338536] should_fail.cold+0x10a/0x149 [ 590.342709] should_failslab+0xd6/0x130 [ 590.346697] kmem_cache_alloc_trace+0x29a/0x3d0 [ 590.351379] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 590.356839] __request_module+0x1f6/0x900 [ 590.361000] ? inet6_create+0x9a9/0xe20 [ 590.364984] ? free_modprobe_argv+0x90/0x90 [ 590.369338] ? trace_hardirqs_on+0x10/0x10 [ 590.373581] ? get_pid_task+0xb8/0x130 [ 590.377476] ? trace_hardirqs_on+0x10/0x10 [ 590.381720] ? fs_reclaim_release+0xd0/0x110 [ 590.386171] ? inet6_create+0x956/0xe20 [ 590.390171] ? lock_acquire+0x170/0x3f0 [ 590.394151] ? lock_downgrade+0x740/0x740 [ 590.398310] inet6_create+0x9a9/0xe20 [ 590.402167] __sock_create+0x303/0x620 [ 590.406062] SyS_socket+0xd1/0x1b0 [ 590.409722] ? move_addr_to_kernel+0x60/0x60 [ 590.414154] ? __do_page_fault+0x159/0xad0 [ 590.418391] ? do_syscall_64+0x4c/0x640 [ 590.422368] ? move_addr_to_kernel+0x60/0x60 [ 590.426781] do_syscall_64+0x1d5/0x640 [ 590.430784] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 590.436168] RIP: 0033:0x465ef9 [ 590.439449] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 590.447164] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 590.454458] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a 17:32:20 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000040)={"4189e2a8aba24045036f5b124f1da2dc33033531d1d4a40f17c179ef5f89", 0x4, 0x1, 0x1, 0x0, 0x3, 0x4, 0x6, 0x1, [0xffff, 0x6, 0x80000001, 0xc8, 0x1000, 0x7, 0x1, 0x7, 0x3, 0x401, 0x100, 0x7ff, 0x1, 0x2, 0xffff, 0x20, 0x825, 0x7892, 0xffff5c78]}) delete_module(&(0x7f0000000000), 0x0) 17:32:20 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7fffffff, 0x9, 0x3, "98e5630000000000004c8cf12473c904000000000000ff0000cde5bd2600"}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20400, 0x0) 17:32:20 executing program 0: delete_module(&(0x7f0000000080)='\xce\x04\xc9Q\x0f\xc8\xa2\xbc\x1de7\\\xc1?`\'\xe6IsX\xb2/6G\xab?\x9e]\xa5\xf3\x15\x97h\xdb\x1f\xb8o\x0e\xe3\xcf\x89Ki\xe2\xed{\xa8H\xfe\x9c\n\x1av~\x89\xb7\xb3\x02\x91\xb6M\xcdv\v]\x9c\xf4\xbc\x1f\xb8\'h\x9c\xfe\xa8\x87', 0x0) [ 590.461754] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 [ 590.469119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.476391] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 17:32:20 executing program 4 (fault-call:0 fault-nth:6): socket$inet6(0xa, 0x3, 0x0) 17:32:20 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x280401, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001200)=@expire={0x144c, 0x18, 0x10, 0x70bd28, 0x25dfdbfd, {{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@rand_addr=0x7, 0x4e22, 0x0, 0x4e20, 0xffe1, 0x2, 0x1b0, 0x80, 0x8, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0xffff0001, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x7fff, 0x400, 0x771032c4, 0x60, 0x2, 0x6, 0x4, 0x1000}, {0x100010001, 0x7, 0x52ca}, {0x2, 0xe3f8, 0x6}, 0x70bd29, 0x3501, 0xa, 0x0, 0xae, 0x20}, 0x23}, [@sec_ctx={0x45, 0x8, {0x41, 0x8, 0x1, 0xcf, 0x39, "a05b800be611382ca9e8d55b7e171b843e5b2cd7a3712ed9c497264ea89b845c687e1ff4dc3a5c2adbae38b20f1867cbd8fc8c5698a25dabab"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x80}, @algo_aead={0x95, 0x12, {{'morus1280-avx2\x00'}, 0x248, 0x180, "35cf843f8b154cf2540e024231464a4a9519ee9447e1e816f5c10f7d9e9ab957220ce020cb6a5894357315c89295f40d99a8c34492a8ff05dc8139a8567ef4e42235ad638686b52d2d"}}, @algo_auth_trunc={0xec, 0x14, {{'cmac(arc4-generic)\x00'}, 0x500, 0x40, "27682c970ae24ffdc235f62de4e7e4aad80bc5587033c227439684e48fb040103c7d63a9b3d1947775a1c7c0542326971d7058071f9dd77884c84e49f0466445100af30e0c1a36acf8b8ccaee1c7bf9a379a2426b8c50bc950fe6ac0d6c53709f423670439eb6cae89dd32b01486b27246620fe7b570ed5c442fded51b1e963f02d694c91bb7e89f90b738b2ce2cb714430538dec7c702186eb896958bf26dd1"}}, @replay_thresh={0x8, 0xb, 0x10000}, @algo_crypt={0x1048, 0x2, {{'xts(aes)\x00'}, 0x8000, "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"}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd27, 0x70bd26, 0x70bd2d, 0x7ff, [0x81, 0x80000000]}}, @etimer_thresh={0x8, 0xc, 0x8}, @algo_auth={0x103, 0x1, {{'wp384\x00'}, 0x5d8, "71089ccb97b85997c555ed87bd8c07dca4a58517f69282482c0a3a005a5b88cd2cb4b91abe01a3f47b36449a3c0f468eb7c786244b07a8f745f41ffd79dbcdd53d06acfbc39f5681dc71d4537651e3610f9cc67cf0ae1dedbf232015ec3bb45f2ed0ddada60039abcefe551fcf96ef0a38b28155f231369c31d492e5fcf6be75871c133833daa84154336bc1791ae6cb948bd01bb92dba407329be94d4534ec30e9099e8f32807f946931acec7e0e27a4749fb0e9f003098bc7551"}}]}, 0x144c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) bind$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x20, 0xb, 0x1, "98e562ebbc7dd2db1d7a824ff226a00400", 0x32314d59}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000001c0)=""/216, &(0x7f00000002c0)=0xd8) 17:32:20 executing program 0: delete_module(&(0x7f0000000000), 0x200) 17:32:20 executing program 1: delete_module(&(0x7f0000000400)='\xa9\x8d\xfdl<\'\xcdW\x18t:\x84\x9cn\x06\x8f\x14\xbf\xb7\xdb\xc8\xc5\xcb\xed^q\xf3F@\xf8\x12[\x82\tz\xd9\xfclk\xda\x8e\x9a\x93\x168q\xa2\x91\\\xf7\xf8>\"\x8f\xc7\xc5X\x9a\x16h\x9e\x9b\n\x8a\xc0\xd2\r\nJ&\xc3\xa0F\x94\xe4\x85\x1fz?\xa0\xd4XNA\xb5G}JM\xff\xa3\xde9\xa2\xfb\x05\xb99\x8f\xda\xf9\xdf\xac!\x89A\x02)oN\xd4\x8b%n\xd3)4\xf0\xe0X&\xf4P\x0f\xe8c\xcaK\xa8y8\xe6I\xd0\xc9$\xd34T\xe6\x13\x80}4\x03\x8fU\xf8\xdf%\xbf\x14\nN\xeakm\xc2\n\xa1wz\xdd\x14P\xa2\xd7\x9d@\x1f_\xcb{H\xb6\xae\x16\xe1\x1b\xdeGA)6\x18\x8c\x10\x87\xfca\xd3\xe4\x86E\xe0\xf9\v[\xf9\x04qq\x17+m\xce\xa2\xca\xa21\xf2\xf4\xdd\xeb:\xe6L\x88C\x0e\xc6\x03\vN`\xc2\xa0+~\x0fD\xee\xf5~\xafk>w~\xb61\x90\xeeO\x96\x10\x17\xe8bi\x85)w\xca\xc0>\xdaM\xb7\xef\x93\xe8\x90\xf3\xab*vL\t\x91\xede \x14\x9bO:u\xd7\xfdu=X\xa8\x85\x81\aZ\xd1\x1c3p|{7[\xc6\xdf\x93I\x1d\x94\xd8\x93kz\x87\xc2\x10l\xa2\xfa\xad\xe9\xb6\x19s\xbc\xb7v\xf6\xe7\xca\xa3$\xf7\xc1\xd3\x1e)\xdf43\xe6;\x87Y\xbd\xe76\x1e\xe6\x99\xb8R\x94p\x14\x8e#<=\x1a\x15\xbd/a\xbc#?<;\xc3?hCe\xde\x8a\xaf\x83lW\x04\xb3\xca\x11\n\xb8]\x11\xfe\xef\xa5\x99\x0e}\x9aS6\xe2\xc8\x8f\xdb\xded\xe7\x8a\xfd\aJ\xe4`\t\xaa\xdbv\xc4L\xd10\x95\x81UL*h\xe3\x9a\b(b\x7f\xd6V\x96]D7\xea\xfec\xd0|\xa4\xb6\xf5Vy-\x9bEkI|}n\x7f\xd8,#\xf6u\xc4\xeb\xce_\xba[\xae\xb9\xb0\\\x14\x19\x7f[\xcbT\x99\xeb\xe1\xc5JL[\x0e}\xf5\xc0\x0f\xefb\x18\xc6<`\f\xc3U\x16A\xdd4ju\xc0\xf9\xb9\x16?\xc6l\xa8|\x8e2\f\xff\x91%\x1c\xfa\x15\n\xd2d\xbc\xac\xc1\x96\x971\xe3\x94\x98\xeb\x11\xee\xe3\xb4\x11q!\xd8\xa7j\xc0n\xe9\xb8^\xcd\x1d\xf8\a\x84\xa11F\x9a\xfa\x8e6y\xeb5g\xc5\xdf\xed\xb5U9\xa7s\x86\x81%\xae\x98\x9f\xe4E<\x96k8\xba\xe5y\xab\xe9\xaf\f\xe2\xa8\xf33K\x82\xca\x10H\x88:\xee\xe7\x87L\x00\xc6\xcdG(\xe2U\x9f\xab\x84\xbb\x82xO\xd5\x9b\xcb\x8bj\x1bI\x00\x00\x00\x00\x00\x00\x15\x19\x88\x05\x81y\xe0\xaa\xf3\xebEJ\x00\x95Q\x972Xu\x92!', 0x600) delete_module(&(0x7f0000000000)='$)+\x00', 0x800) ioperm(0x6, 0x0, 0x45a) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/13) 17:32:20 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x8000000}}, 0x10) 17:32:20 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:20 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:20 executing program 0: delete_module(&(0x7f0000000000), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x8, {0x8, 0xe6b, 0xff7fffff, 0x4}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x80, 0x0, 0x7, 0x2, 0x20, 0x80000000004}}) 17:32:20 executing program 1: delete_module(&(0x7f0000000400)='\xa9\x8d\xfdl<\'\xcdW\x18t:\x84\x9cn\x06\x8f\x14\xbf\xb7\xdb\xc8\xc5\xcb\xed^q\xf3F@\xf8\x12[\x82\tz\xd9\xfclk\xda\x8e\x9a\x93\x168q\xa2\x91\\\xf7\xf8>\"\x8f\xc7\xc5X\x9a\x16h\x9e\x9b\n\x8a\xc0\xd2\r\nJ&\xc3\xa0F\x94\xe4\x85\x1fz?\xa0\xd4XNA\xb5G}JM\xff\xa3\xde9\xa2\xfb\x05\xb99\x8f\xda\xf9\xdf\xac!\x89A\x02)oN\xd4\x8b%n\xd3)4\xf0\xe0X&\xf4P\x0f\xe8c\xcaK\xa8y8\xe6I\xd0\xc9$\xd34T\xe6\x13\x80}4\x03\x8fU\xf8\xdf%\xbf\x14\nN\xeakm\xc2\n\xa1wz\xdd\x14P\xa2\xd7\x9d@\x1f_\xcb{H\xb6\xae\x16\xe1\x1b\xdeGA)6\x18\x8c\x10\x87\xfca\xd3\xe4\x86E\xe0\xf9\v[\xf9\x04qq\x17+m\xce\xa2\xca\xa21\xf2\xf4\xdd\xeb:\xe6L\x88C\x0e\xc6\x03\vN`\xc2\xa0+~\x0fD\xee\xf5~\xafk>w~\xb61\x90\xeeO\x96\x10\x17\xe8bi\x85)w\xca\xc0>\xdaM\xb7\xef\x93\xe8\x90\xf3\xab*vL\t\x91\xede \x14\x9bO:u\xd7\xfdu=X\xa8\x85\x81\aZ\xd1\x1c3p|{7[\xc6\xdf\x93I\x1d\x94\xd8\x93kz\x87\xc2\x10l\xa2\xfa\xad\xe9\xb6\x19s\xbc\xb7v\xf6\xe7\xca\xa3$\xf7\xc1\xd3\x1e)\xdf43\xe6;\x87Y\xbd\xe76\x1e\xe6\x99\xb8R\x94p\x14\x8e#<=\x1a\x15\xbd/a\xbc#?<;\xc3?hCe\xde\x8a\xaf\x83lW\x04\xb3\xca\x11\n\xb8]\x11\xfe\xef\xa5\x99\x0e}\x9aS6\xe2\xc8\x8f\xdb\xded\xe7\x8a\xfd\aJ\xe4`\t\xaa\xdbv\xc4L\xd10\x95\x81UL*h\xe3\x9a\b(b\x7f\xd6V\x96]D7\xea\xfec\xd0|\xa4\xb6\xf5Vy-\x9bEkI|}n\x7f\xd8,#\xf6u\xc4\xeb\xce_\xba[\xae\xb9\xb0\\\x14\x19\x7f[\xcbT\x99\xeb\xe1\xc5JL[\x0e}\xf5\xc0\x0f\xefb\x18\xc6<`\f\xc3U\x16A\xdd4ju\xc0\xf9\xb9\x16?\xc6l\xa8|\x8e2\f\xff\x91%\x1c\xfa\x15\n\xd2d\xbc\xac\xc1\x96\x971\xe3\x94\x98\xeb\x11\xee\xe3\xb4\x11q!\xd8\xa7j\xc0n\xe9\xb8^\xcd\x1d\xf8\a\x84\xa11F\x9a\xfa\x8e6y\xeb5g\xc5\xdf\xed\xb5U9\xa7s\x86\x81%\xae\x98\x9f\xe4E<\x96k8\xba\xe5y\xab\xe9\xaf\f\xe2\xa8\xf33K\x82\xca\x10H\x88:\xee\xe7\x87L\x00\xc6\xcdG(\xe2U\x9f\xab\x84\xbb\x82xO\xd5\x9b\xcb\x8bj\x1bI\x00\x00\x00\x00\x00\x00\x15\x19\x88\x05\x81y\xe0\xaa\xf3\xebEJ\x00\x95Q\x972Xu\x92!', 0x600) delete_module(&(0x7f0000000000)='$)+\x00', 0x800) ioperm(0x6, 0x0, 0x45a) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/13) 17:32:20 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x0, 0x3f}) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0xb, {0x4, 0x8, 0x9, 0xff}}) 17:32:20 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x7}) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) [ 590.657616] FAULT_INJECTION: forcing a failure. [ 590.657616] name failslab, interval 1, probability 0, space 0, times 0 [ 590.706000] CPU: 1 PID: 4752 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 590.713840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.723226] Call Trace: [ 590.725830] dump_stack+0x1b2/0x281 [ 590.729558] should_fail.cold+0x10a/0x149 [ 590.734336] should_failslab+0xd6/0x130 [ 590.738346] __kmalloc_track_caller+0x2bc/0x400 [ 590.743024] ? __request_module+0x214/0x900 [ 590.747354] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 590.752381] kstrdup+0x36/0x70 [ 590.755769] __request_module+0x214/0x900 [ 590.761092] ? inet6_create+0x9a9/0xe20 [ 590.765286] ? free_modprobe_argv+0x90/0x90 [ 590.769912] ? trace_hardirqs_on+0x10/0x10 [ 590.774154] ? get_pid_task+0xb8/0x130 [ 590.778050] ? trace_hardirqs_on+0x10/0x10 [ 590.782299] ? fs_reclaim_release+0xd0/0x110 [ 590.786753] ? inet6_create+0x956/0xe20 [ 590.790738] ? lock_acquire+0x170/0x3f0 [ 590.794714] ? lock_downgrade+0x740/0x740 [ 590.798875] inet6_create+0x9a9/0xe20 [ 590.802689] __sock_create+0x303/0x620 [ 590.806584] SyS_socket+0xd1/0x1b0 [ 590.810132] ? move_addr_to_kernel+0x60/0x60 [ 590.814979] ? __do_page_fault+0x159/0xad0 [ 590.819219] ? do_syscall_64+0x4c/0x640 [ 590.823202] ? move_addr_to_kernel+0x60/0x60 [ 590.827710] do_syscall_64+0x1d5/0x640 [ 590.831602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 590.836790] RIP: 0033:0x465ef9 [ 590.839977] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 590.847779] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 17:32:20 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x0, 0x0, [0x3ff, 0x3, 0x4, 0x2, 0x7, 0x4, 0x101, 0x4]}) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x2) delete_module(&(0x7f0000000000), 0x0) 17:32:21 executing program 4 (fault-call:0 fault-nth:7): socket$inet6(0xa, 0x3, 0x0) 17:32:21 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98ed62ebbc7dd2db1d7a7e79f2a6a0123c3f1ba40200", 0x3231564e}) 17:32:21 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x3}}, 0x10) 17:32:21 executing program 1: delete_module(&(0x7f0000000400)='\xa9\x8d\xfdl<\'\xcdW\x18t:\x84\x9cn\x06\x8f\x14\xbf\xb7\xdb\xc8\xc5\xcb\xed^q\xf3F@\xf8\x12[\x82\tz\xd9\xfclk\xda\x8e\x9a\x93\x168q\xa2\x91\\\xf7\xf8>\"\x8f\xc7\xc5X\x9a\x16h\x9e\x9b\n\x8a\xc0\xd2\r\nJ&\xc3\xa0F\x94\xe4\x85\x1fz?\xa0\xd4XNA\xb5G}JM\xff\xa3\xde9\xa2\xfb\x05\xb99\x8f\xda\xf9\xdf\xac!\x89A\x02)oN\xd4\x8b%n\xd3)4\xf0\xe0X&\xf4P\x0f\xe8c\xcaK\xa8y8\xe6I\xd0\xc9$\xd34T\xe6\x13\x80}4\x03\x8fU\xf8\xdf%\xbf\x14\nN\xeakm\xc2\n\xa1wz\xdd\x14P\xa2\xd7\x9d@\x1f_\xcb{H\xb6\xae\x16\xe1\x1b\xdeGA)6\x18\x8c\x10\x87\xfca\xd3\xe4\x86E\xe0\xf9\v[\xf9\x04qq\x17+m\xce\xa2\xca\xa21\xf2\xf4\xdd\xeb:\xe6L\x88C\x0e\xc6\x03\vN`\xc2\xa0+~\x0fD\xee\xf5~\xafk>w~\xb61\x90\xeeO\x96\x10\x17\xe8bi\x85)w\xca\xc0>\xdaM\xb7\xef\x93\xe8\x90\xf3\xab*vL\t\x91\xede \x14\x9bO:u\xd7\xfdu=X\xa8\x85\x81\aZ\xd1\x1c3p|{7[\xc6\xdf\x93I\x1d\x94\xd8\x93kz\x87\xc2\x10l\xa2\xfa\xad\xe9\xb6\x19s\xbc\xb7v\xf6\xe7\xca\xa3$\xf7\xc1\xd3\x1e)\xdf43\xe6;\x87Y\xbd\xe76\x1e\xe6\x99\xb8R\x94p\x14\x8e#<=\x1a\x15\xbd/a\xbc#?<;\xc3?hCe\xde\x8a\xaf\x83lW\x04\xb3\xca\x11\n\xb8]\x11\xfe\xef\xa5\x99\x0e}\x9aS6\xe2\xc8\x8f\xdb\xded\xe7\x8a\xfd\aJ\xe4`\t\xaa\xdbv\xc4L\xd10\x95\x81UL*h\xe3\x9a\b(b\x7f\xd6V\x96]D7\xea\xfec\xd0|\xa4\xb6\xf5Vy-\x9bEkI|}n\x7f\xd8,#\xf6u\xc4\xeb\xce_\xba[\xae\xb9\xb0\\\x14\x19\x7f[\xcbT\x99\xeb\xe1\xc5JL[\x0e}\xf5\xc0\x0f\xefb\x18\xc6<`\f\xc3U\x16A\xdd4ju\xc0\xf9\xb9\x16?\xc6l\xa8|\x8e2\f\xff\x91%\x1c\xfa\x15\n\xd2d\xbc\xac\xc1\x96\x971\xe3\x94\x98\xeb\x11\xee\xe3\xb4\x11q!\xd8\xa7j\xc0n\xe9\xb8^\xcd\x1d\xf8\a\x84\xa11F\x9a\xfa\x8e6y\xeb5g\xc5\xdf\xed\xb5U9\xa7s\x86\x81%\xae\x98\x9f\xe4E<\x96k8\xba\xe5y\xab\xe9\xaf\f\xe2\xa8\xf33K\x82\xca\x10H\x88:\xee\xe7\x87L\x00\xc6\xcdG(\xe2U\x9f\xab\x84\xbb\x82xO\xd5\x9b\xcb\x8bj\x1bI\x00\x00\x00\x00\x00\x00\x15\x19\x88\x05\x81y\xe0\xaa\xf3\xebEJ\x00\x95Q\x972Xu\x92!', 0x600) delete_module(&(0x7f0000000000)='$)+\x00', 0x800) ioperm(0x6, 0x0, 0x45a) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/13) 17:32:21 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) [ 590.855065] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a [ 590.862343] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 [ 590.869672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.876946] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 17:32:21 executing program 0: delete_module(&(0x7f0000000000), 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) ioperm(0x800, 0x3, 0x7) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x3}, 0x8) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 17:32:21 executing program 3: socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2, 0x800000}}}, 0x6c) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) [ 590.987797] FAULT_INJECTION: forcing a failure. [ 590.987797] name failslab, interval 1, probability 0, space 0, times 0 [ 591.027841] CPU: 0 PID: 4788 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0 [ 591.035681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.045043] Call Trace: [ 591.047642] dump_stack+0x1b2/0x281 [ 591.051306] should_fail.cold+0x10a/0x149 [ 591.055469] should_failslab+0xd6/0x130 [ 591.059458] kmem_cache_alloc_trace+0x29a/0x3d0 [ 591.064133] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 591.069156] ? dec_ucount+0x120/0x120 [ 591.072976] call_usermodehelper_setup+0x73/0x2e0 [ 591.077849] __request_module+0x30f/0x900 [ 591.082012] ? inet6_create+0x9a9/0xe20 17:32:21 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000000c0)={0xb242, 0x0, [], {0x0, @reserved}}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) [ 591.085993] ? free_modprobe_argv+0x90/0x90 [ 591.090320] ? trace_hardirqs_on+0x10/0x10 [ 591.094558] ? get_pid_task+0xb8/0x130 [ 591.098450] ? trace_hardirqs_on+0x10/0x10 [ 591.102690] ? fs_reclaim_release+0xd0/0x110 [ 591.107154] ? inet6_create+0x956/0xe20 [ 591.111144] ? lock_acquire+0x170/0x3f0 [ 591.115126] ? lock_downgrade+0x740/0x740 [ 591.119282] inet6_create+0x9a9/0xe20 [ 591.123097] __sock_create+0x303/0x620 [ 591.126993] SyS_socket+0xd1/0x1b0 [ 591.130549] ? move_addr_to_kernel+0x60/0x60 [ 591.134966] ? __do_page_fault+0x159/0xad0 [ 591.139208] ? do_syscall_64+0x4c/0x640 [ 591.143196] ? move_addr_to_kernel+0x60/0x60 [ 591.147616] do_syscall_64+0x1d5/0x640 [ 591.151513] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 591.156703] RIP: 0033:0x465ef9 [ 591.159900] RSP: 002b:00007fa0fc194188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 591.167613] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 591.174897] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a 17:32:21 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:21 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:21 executing program 0: delete_module(&(0x7f0000000080)='.\x02\x8c\x86\xf0\xe7\x83&\xfdw\x8f\xa4}p\x06\x00\x00\x00\xb4\xf0!%\xf9\xa9u\t\x00\x00cqI\x06\x02\x17a\x80:R\xd5H\x92\xc8\x10\xcf\x89]\xdd|\xe9\xf6\xa2\xd1\x11\xbe\xe7a\x14\xd2?\xf6\xd8\x01\xff\xe2\xc4`d=\xbdT\fn\x18v\x9a\x1b\xef\x8a\x10\x94\xd0\x91\xa2e\xf4E\a\x91\rK\x03\x86\x06\xf4\xfc\xbe7\xe6<\xe5`\xfe\a0\x82\x06bHl\xe5', 0x200) 17:32:21 executing program 1: delete_module(&(0x7f0000000400)='\xa9\x8d\xfdl<\'\xcdW\x18t:\x84\x9cn\x06\x8f\x14\xbf\xb7\xdb\xc8\xc5\xcb\xed^q\xf3F@\xf8\x12[\x82\tz\xd9\xfclk\xda\x8e\x9a\x93\x168q\xa2\x91\\\xf7\xf8>\"\x8f\xc7\xc5X\x9a\x16h\x9e\x9b\n\x8a\xc0\xd2\r\nJ&\xc3\xa0F\x94\xe4\x85\x1fz?\xa0\xd4XNA\xb5G}JM\xff\xa3\xde9\xa2\xfb\x05\xb99\x8f\xda\xf9\xdf\xac!\x89A\x02)oN\xd4\x8b%n\xd3)4\xf0\xe0X&\xf4P\x0f\xe8c\xcaK\xa8y8\xe6I\xd0\xc9$\xd34T\xe6\x13\x80}4\x03\x8fU\xf8\xdf%\xbf\x14\nN\xeakm\xc2\n\xa1wz\xdd\x14P\xa2\xd7\x9d@\x1f_\xcb{H\xb6\xae\x16\xe1\x1b\xdeGA)6\x18\x8c\x10\x87\xfca\xd3\xe4\x86E\xe0\xf9\v[\xf9\x04qq\x17+m\xce\xa2\xca\xa21\xf2\xf4\xdd\xeb:\xe6L\x88C\x0e\xc6\x03\vN`\xc2\xa0+~\x0fD\xee\xf5~\xafk>w~\xb61\x90\xeeO\x96\x10\x17\xe8bi\x85)w\xca\xc0>\xdaM\xb7\xef\x93\xe8\x90\xf3\xab*vL\t\x91\xede \x14\x9bO:u\xd7\xfdu=X\xa8\x85\x81\aZ\xd1\x1c3p|{7[\xc6\xdf\x93I\x1d\x94\xd8\x93kz\x87\xc2\x10l\xa2\xfa\xad\xe9\xb6\x19s\xbc\xb7v\xf6\xe7\xca\xa3$\xf7\xc1\xd3\x1e)\xdf43\xe6;\x87Y\xbd\xe76\x1e\xe6\x99\xb8R\x94p\x14\x8e#<=\x1a\x15\xbd/a\xbc#?<;\xc3?hCe\xde\x8a\xaf\x83lW\x04\xb3\xca\x11\n\xb8]\x11\xfe\xef\xa5\x99\x0e}\x9aS6\xe2\xc8\x8f\xdb\xded\xe7\x8a\xfd\aJ\xe4`\t\xaa\xdbv\xc4L\xd10\x95\x81UL*h\xe3\x9a\b(b\x7f\xd6V\x96]D7\xea\xfec\xd0|\xa4\xb6\xf5Vy-\x9bEkI|}n\x7f\xd8,#\xf6u\xc4\xeb\xce_\xba[\xae\xb9\xb0\\\x14\x19\x7f[\xcbT\x99\xeb\xe1\xc5JL[\x0e}\xf5\xc0\x0f\xefb\x18\xc6<`\f\xc3U\x16A\xdd4ju\xc0\xf9\xb9\x16?\xc6l\xa8|\x8e2\f\xff\x91%\x1c\xfa\x15\n\xd2d\xbc\xac\xc1\x96\x971\xe3\x94\x98\xeb\x11\xee\xe3\xb4\x11q!\xd8\xa7j\xc0n\xe9\xb8^\xcd\x1d\xf8\a\x84\xa11F\x9a\xfa\x8e6y\xeb5g\xc5\xdf\xed\xb5U9\xa7s\x86\x81%\xae\x98\x9f\xe4E<\x96k8\xba\xe5y\xab\xe9\xaf\f\xe2\xa8\xf33K\x82\xca\x10H\x88:\xee\xe7\x87L\x00\xc6\xcdG(\xe2U\x9f\xab\x84\xbb\x82xO\xd5\x9b\xcb\x8bj\x1bI\x00\x00\x00\x00\x00\x00\x15\x19\x88\x05\x81y\xe0\xaa\xf3\xebEJ\x00\x95Q\x972Xu\x92!', 0x600) delete_module(&(0x7f0000000000)='$)+\x00', 0x800) ioperm(0x6, 0x0, 0x45a) [ 591.182191] RBP: 00007fa0fc1941d0 R08: 0000000000000000 R09: 0000000000000000 [ 591.189487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.196890] R13: 00007fff5717da7f R14: 00007fa0fc194300 R15: 0000000000022000 [ 591.257573] nbd: must specify a device to reconfigure 17:32:21 executing program 4 (fault-call:0 fault-nth:8): socket$inet6(0xa, 0x3, 0x0) 17:32:21 executing program 2: ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000100)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3, 0x7, 0x0, "98e562ebbc7dd2db8a2d348cb12460b40400", 0x3436324d}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000000c0)) 17:32:21 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:21 executing program 1: delete_module(&(0x7f0000000400)='\xa9\x8d\xfdl<\'\xcdW\x18t:\x84\x9cn\x06\x8f\x14\xbf\xb7\xdb\xc8\xc5\xcb\xed^q\xf3F@\xf8\x12[\x82\tz\xd9\xfclk\xda\x8e\x9a\x93\x168q\xa2\x91\\\xf7\xf8>\"\x8f\xc7\xc5X\x9a\x16h\x9e\x9b\n\x8a\xc0\xd2\r\nJ&\xc3\xa0F\x94\xe4\x85\x1fz?\xa0\xd4XNA\xb5G}JM\xff\xa3\xde9\xa2\xfb\x05\xb99\x8f\xda\xf9\xdf\xac!\x89A\x02)oN\xd4\x8b%n\xd3)4\xf0\xe0X&\xf4P\x0f\xe8c\xcaK\xa8y8\xe6I\xd0\xc9$\xd34T\xe6\x13\x80}4\x03\x8fU\xf8\xdf%\xbf\x14\nN\xeakm\xc2\n\xa1wz\xdd\x14P\xa2\xd7\x9d@\x1f_\xcb{H\xb6\xae\x16\xe1\x1b\xdeGA)6\x18\x8c\x10\x87\xfca\xd3\xe4\x86E\xe0\xf9\v[\xf9\x04qq\x17+m\xce\xa2\xca\xa21\xf2\xf4\xdd\xeb:\xe6L\x88C\x0e\xc6\x03\vN`\xc2\xa0+~\x0fD\xee\xf5~\xafk>w~\xb61\x90\xeeO\x96\x10\x17\xe8bi\x85)w\xca\xc0>\xdaM\xb7\xef\x93\xe8\x90\xf3\xab*vL\t\x91\xede \x14\x9bO:u\xd7\xfdu=X\xa8\x85\x81\aZ\xd1\x1c3p|{7[\xc6\xdf\x93I\x1d\x94\xd8\x93kz\x87\xc2\x10l\xa2\xfa\xad\xe9\xb6\x19s\xbc\xb7v\xf6\xe7\xca\xa3$\xf7\xc1\xd3\x1e)\xdf43\xe6;\x87Y\xbd\xe76\x1e\xe6\x99\xb8R\x94p\x14\x8e#<=\x1a\x15\xbd/a\xbc#?<;\xc3?hCe\xde\x8a\xaf\x83lW\x04\xb3\xca\x11\n\xb8]\x11\xfe\xef\xa5\x99\x0e}\x9aS6\xe2\xc8\x8f\xdb\xded\xe7\x8a\xfd\aJ\xe4`\t\xaa\xdbv\xc4L\xd10\x95\x81UL*h\xe3\x9a\b(b\x7f\xd6V\x96]D7\xea\xfec\xd0|\xa4\xb6\xf5Vy-\x9bEkI|}n\x7f\xd8,#\xf6u\xc4\xeb\xce_\xba[\xae\xb9\xb0\\\x14\x19\x7f[\xcbT\x99\xeb\xe1\xc5JL[\x0e}\xf5\xc0\x0f\xefb\x18\xc6<`\f\xc3U\x16A\xdd4ju\xc0\xf9\xb9\x16?\xc6l\xa8|\x8e2\f\xff\x91%\x1c\xfa\x15\n\xd2d\xbc\xac\xc1\x96\x971\xe3\x94\x98\xeb\x11\xee\xe3\xb4\x11q!\xd8\xa7j\xc0n\xe9\xb8^\xcd\x1d\xf8\a\x84\xa11F\x9a\xfa\x8e6y\xeb5g\xc5\xdf\xed\xb5U9\xa7s\x86\x81%\xae\x98\x9f\xe4E<\x96k8\xba\xe5y\xab\xe9\xaf\f\xe2\xa8\xf33K\x82\xca\x10H\x88:\xee\xe7\x87L\x00\xc6\xcdG(\xe2U\x9f\xab\x84\xbb\x82xO\xd5\x9b\xcb\x8bj\x1bI\x00\x00\x00\x00\x00\x00\x15\x19\x88\x05\x81y\xe0\xaa\xf3\xebEJ\x00\x95Q\x972Xu\x92!', 0x600) delete_module(&(0x7f0000000000)='$)+\x00', 0x800) 17:32:21 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0xfffffffffffffff7, 0x10}) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x2}}}, 0x10) 17:32:21 executing program 0: delete_module(&(0x7f0000000000), 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x109200) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000100)={0x90, 0x6f, &(0x7f0000000040)="488b3b38a45e022e9d49bdf26d1f20cd4a5af7fc3613b8033bf567208e6561e5c718492d87327dc40ad416f77a5f2b48410de0d7db8bce38d25da546cd84ddfcdc43d2b3c3a7cdd4277daf611bf2541cd1b217cdcef71c1e9b2bea560eff2a6f3b2a5c5ec4b0659dfefc3329e2b7c82d6227caefc1383d84cacf4e217464f383d85e0f3c03a1cff9489edc2a3d41f5ed64bb998622eb3c6002cadeaea6387c12025f82e231c6e21fb6cd352161873999ffcf3dd029d6", {0x3f, 0x100, 0x34325241, 0x0, 0x8000, 0xff, 0x0, 0x7fffffff}}) 17:32:21 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) 17:32:21 executing program 1: delete_module(&(0x7f0000000400)='\xa9\x8d\xfdl<\'\xcdW\x18t:\x84\x9cn\x06\x8f\x14\xbf\xb7\xdb\xc8\xc5\xcb\xed^q\xf3F@\xf8\x12[\x82\tz\xd9\xfclk\xda\x8e\x9a\x93\x168q\xa2\x91\\\xf7\xf8>\"\x8f\xc7\xc5X\x9a\x16h\x9e\x9b\n\x8a\xc0\xd2\r\nJ&\xc3\xa0F\x94\xe4\x85\x1fz?\xa0\xd4XNA\xb5G}JM\xff\xa3\xde9\xa2\xfb\x05\xb99\x8f\xda\xf9\xdf\xac!\x89A\x02)oN\xd4\x8b%n\xd3)4\xf0\xe0X&\xf4P\x0f\xe8c\xcaK\xa8y8\xe6I\xd0\xc9$\xd34T\xe6\x13\x80}4\x03\x8fU\xf8\xdf%\xbf\x14\nN\xeakm\xc2\n\xa1wz\xdd\x14P\xa2\xd7\x9d@\x1f_\xcb{H\xb6\xae\x16\xe1\x1b\xdeGA)6\x18\x8c\x10\x87\xfca\xd3\xe4\x86E\xe0\xf9\v[\xf9\x04qq\x17+m\xce\xa2\xca\xa21\xf2\xf4\xdd\xeb:\xe6L\x88C\x0e\xc6\x03\vN`\xc2\xa0+~\x0fD\xee\xf5~\xafk>w~\xb61\x90\xeeO\x96\x10\x17\xe8bi\x85)w\xca\xc0>\xdaM\xb7\xef\x93\xe8\x90\xf3\xab*vL\t\x91\xede \x14\x9bO:u\xd7\xfdu=X\xa8\x85\x81\aZ\xd1\x1c3p|{7[\xc6\xdf\x93I\x1d\x94\xd8\x93kz\x87\xc2\x10l\xa2\xfa\xad\xe9\xb6\x19s\xbc\xb7v\xf6\xe7\xca\xa3$\xf7\xc1\xd3\x1e)\xdf43\xe6;\x87Y\xbd\xe76\x1e\xe6\x99\xb8R\x94p\x14\x8e#<=\x1a\x15\xbd/a\xbc#?<;\xc3?hCe\xde\x8a\xaf\x83lW\x04\xb3\xca\x11\n\xb8]\x11\xfe\xef\xa5\x99\x0e}\x9aS6\xe2\xc8\x8f\xdb\xded\xe7\x8a\xfd\aJ\xe4`\t\xaa\xdbv\xc4L\xd10\x95\x81UL*h\xe3\x9a\b(b\x7f\xd6V\x96]D7\xea\xfec\xd0|\xa4\xb6\xf5Vy-\x9bEkI|}n\x7f\xd8,#\xf6u\xc4\xeb\xce_\xba[\xae\xb9\xb0\\\x14\x19\x7f[\xcbT\x99\xeb\xe1\xc5JL[\x0e}\xf5\xc0\x0f\xefb\x18\xc6<`\f\xc3U\x16A\xdd4ju\xc0\xf9\xb9\x16?\xc6l\xa8|\x8e2\f\xff\x91%\x1c\xfa\x15\n\xd2d\xbc\xac\xc1\x96\x971\xe3\x94\x98\xeb\x11\xee\xe3\xb4\x11q!\xd8\xa7j\xc0n\xe9\xb8^\xcd\x1d\xf8\a\x84\xa11F\x9a\xfa\x8e6y\xeb5g\xc5\xdf\xed\xb5U9\xa7s\x86\x81%\xae\x98\x9f\xe4E<\x96k8\xba\xe5y\xab\xe9\xaf\f\xe2\xa8\xf33K\x82\xca\x10H\x88:\xee\xe7\x87L\x00\xc6\xcdG(\xe2U\x9f\xab\x84\xbb\x82xO\xd5\x9b\xcb\x8bj\x1bI\x00\x00\x00\x00\x00\x00\x15\x19\x88\x05\x81y\xe0\xaa\xf3\xebEJ\x00\x95Q\x972Xu\x92!', 0x600) 17:32:21 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:21 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x3, 0x8}) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x6, 0x1ff, 0x5000d791, 0x7, 0x6, 0xbc, 0x16, 0x4}}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f00000001c0)={0x1, 0x0, {0x9, 0x3, 0x10001, 0x7ff}}) 17:32:21 executing program 4: socket$inet6(0xa, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x9) 17:32:21 executing program 0: delete_module(&(0x7f0000000000), 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 17:32:21 executing program 1: delete_module(0x0, 0x600) 17:32:21 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xa06, 0x5, 0x4, "7ffe22c54cd1154186d1c4c6f399e202761f543e6b73aa3771c242eec6353ba6", 0x31384142}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000000c0)={0x7, "0496b2309904000000000000010000000000000000ae078db900", 0x2, 0x1}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x6) 17:32:21 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:21 executing program 1: delete_module(0x0, 0x600) 17:32:21 executing program 0: delete_module(&(0x7f0000000000)='\xc11\x90\xdf\f\xb5\xa0\xb8T\x9ea\x91\xc3\xe8hj\xec\x03\x8ag\x95\x04\xd6\xd1&\xb2\xcbN\xf3h\xd7\xc9\x11\xf4\x1c \xde\xdb\xa6#\x02y\x91\x1fp\xb4\x97\x1c\x00\x00BOkzK\x12\xe7\x83\xd5\x81$\x18p\xde\xcc\\\x1c\x95T\xed\\\x1d~\x040N\x8d\\N>\xca\x1f\xd5\xf4>\x16D\xcd\xd6\xe6i-&2\xb4\xcd\x02\x9d\x8bh\x13h\xc8~\x06\x00\x00\x008\x02\xac\x88\x13\xb0\tD\x18\x9f\"\x13\x1e\xe92\xc2%4C\xba\xca\x03N\x9a\xdf0>\x1e\xcf:\v\xec4\x93{e7\xeb\xa6\xf9-\xa0\xebqR\x88\xb0\xcc\x8fb\xc0\xe7\xee\x10\x96\x90\x14\v\xf7\x83Q\xde4$X\xfd\x0e\xb8#\xb3_G\xdc\xd9\xfa\xc0f/\xdd\xbf\x00'/208, 0x0) delete_module(&(0x7f0000000100)=' \xf6\xbco\xbd\xbc', 0x800) delete_module(&(0x7f0000000140)='@[[(\xd5\x00', 0x0) [ 591.524831] vivid-002: ================= START STATUS ================= [ 591.555634] vivid-002: ================== END STATUS ================== 17:32:21 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:21 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000140)) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000180)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x3, 0x2, "98e562ebbc7dfeffffffff15ffffa0123c1e1ba4a500348cb12460c90400"}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x5, 0x2007, 0x8, 0xa, 0x4, 0x2, 0x7}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000280)={0x0, 0x1f, 0x0, [], &(0x7f0000000240)=0x1}) [ 591.606859] vivid-002: ================= START STATUS ================= [ 591.631459] vivid-002: ================== END STATUS ================== 17:32:21 executing program 3: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, 0x0, r0) r1 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x200001) rt_sigreturn() r2 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x53a, &(0x7f0000000100)=""/237) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:21 executing program 1: delete_module(0x0, 0x600) 17:32:21 executing program 4: socket$inet6(0xa, 0x3, 0xfc74) 17:32:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x200, 0x0, [], {0x0, @bt={0x10001, 0x8, 0x0, 0x0, 0x10001, 0xfffffffc, 0x200, 0x81, 0x8e, 0x2, 0x100, 0x3, 0x5, 0xffff8001, 0x6, 0x34, {0x6bb1, 0x4}, 0x5a, 0x8}}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x8}) delete_module(&(0x7f0000000000), 0x0) 17:32:21 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:21 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000040)={0x3, 0x1, @stop_pts=0x401}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) 17:32:21 executing program 1: delete_module(&(0x7f0000000400)='\xa9\x8d\xfdl<\'\xcdW\x18t:\x84\x9cn\x06\x8f\x14\xbf\xb7\xdb\xc8\xc5\xcb\xed^q\xf3F@\xf8\x12[\x82\tz\xd9\xfclk\xda\x8e\x9a\x93\x168q\xa2\x91\\\xf7\xf8>\"\x8f\xc7\xc5X\x9a\x16h\x9e\x9b\n\x8a\xc0\xd2\r\nJ&\xc3\xa0F\x94\xe4\x85\x1fz?\xa0\xd4XNA\xb5G}JM\xff\xa3\xde9\xa2\xfb\x05\xb99\x8f\xda\xf9\xdf\xac!\x89A\x02)oN\xd4\x8b%n\xd3)4\xf0\xe0X&\xf4P\x0f\xe8c\xcaK\xa8y8\xe6I\xd0\xc9$\xd34T\xe6\x13\x80}4\x03\x8fU\xf8\xdf%\xbf\x14\nN\xeakm\xc2\n\xa1wz\xdd\x14P\xa2\xd7\x9d@\x1f_\xcb{H\xb6\xae\x16\xe1\x1b\xdeGA)6\x18\x8c\x10\x87\xfca\xd3\xe4\x86E\xe0\xf9\v[\xf9\x04qq\x17+m\xce\xa2\xca\xa21\xf2\xf4\xdd\xeb:\xe6L\x88C\x0e\xc6\x03\vN`\xc2\xa0+~\x0fD\xee\xf5~\xafk>w~\xb61\x90\xeeO\x96\x10\x17\xe8bi\x85)w\xca\xc0>\xdaM\xb7\xef\x93\xe8\x90\xf3\xab*vL\t\x91\xede \x14\x9bO:u\xd7\xfdu=X\xa8\x85\x81\aZ\xd1\x1c3p|{7[\xc6\xdf\x93I\x1d\x94\xd8\x93kz\x87\xc2\x10l\xa2\xfa\xad\xe9\xb6\x19s\xbc\xb7v\xf6\xe7\xca\xa3$\xf7\xc1\xd3\x1e)\xdf43\xe6;\x87Y\xbd\xe76\x1e\xe6\x99\xb8R\x94p\x14\x8e#<=\x1a\x15\xbd/a\xbc#?<;\xc3?hCe\xde\x8a\xaf\x83lW\x04\xb3\xca\x11\n\xb8]\x11\xfe\xef\xa5\x99\x0e}\x9aS6\xe2\xc8\x8f\xdb\xded\xe7\x8a\xfd\aJ\xe4`\t\xaa\xdbv\xc4L\xd10\x95\x81UL*h\xe3\x9a\b(b\x7f\xd6V\x96]D7\xea\xfec\xd0|\xa4\xb6\xf5Vy-\x9bEkI|}n\x7f\xd8,#\xf6u\xc4\xeb\xce_\xba[\xae\xb9\xb0\\\x14\x19\x7f[\xcbT\x99\xeb\xe1\xc5JL[\x0e}\xf5\xc0\x0f\xefb\x18\xc6<`\f\xc3U\x16A\xdd4ju\xc0\xf9\xb9\x16?\xc6l\xa8|\x8e2\f\xff\x91%\x1c\xfa\x15\n\xd2d\xbc\xac\xc1\x96\x971\xe3\x94\x98\xeb\x11\xee\xe3\xb4\x11q!\xd8\xa7j\xc0n\xe9\xb8^\xcd\x1d\xf8\a\x84\xa11F\x9a\xfa\x8e6y\xeb5g\xc5\xdf\xed\xb5U9\xa7s\x86\x81%\xae\x98\x9f\xe4E<\x96k8\xba\xe5y\xab\xe9\xaf\f\xe2\xa8\xf33K\x82\xca\x10H\x88:\xee\xe7\x87L\x00\xc6\xcdG(\xe2U\x9f\xab\x84\xbb\x82xO\xd5\x9b\xcb\x8bj\x1bI\x00\x00\x00\x00\x00\x00\x15\x19\x88\x05\x81y\xe0\xaa\xf3\xebEJ\x00\x95Q\x972Xu\x92!', 0x0) 17:32:21 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000280)={0x2, 0x0, [], {0x0, @bt={0xffffffff, 0x719, 0x1, 0x1, 0x0, 0x2ef5, 0x618, 0xa9, 0x2, 0x9, 0xfffffff7, 0x5, 0x1, 0x0, 0x1, 0x22, {0x5, 0x7}, 0x7f, 0x8}}}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x3, 0x1, @start={0x3}}) socket$inet6(0xa, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000140)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x80200, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0x1ff) r4 = getgid() getgroups(0x5, &(0x7f0000000180)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x3, &(0x7f00000001c0)=[r4, r5, 0x0]) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x5bd, 0x1, 0x2022, 0x5, 0x1, 0x7, 0xf1259fa5c05c3d86, 0x2}}) 17:32:21 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0xff, 0x80000, [], &(0x7f0000000000)=0x9}) 17:32:21 executing program 0: delete_module(&(0x7f0000000000)='&\xef\x068d,-\xf6\xb3F\xaf\xc4\f\xdf\x98\xc1\x03\x90\x8f`\x05\xc1\xa7\xd2\x8f\x87VC\xe4\xfb\x81\x1d\xd5\xed\xc2K\ti\x18\xba\xc9B@\x8f\x93\x80\x93\xe54\b\x9c\xff\x83\xfa\xb9\xbb\x93$d\xe6B\xa5\xe7\x9bi\xbe*\x91\x87\x8fJ@\xd9J\xacK,L\xf5\xa2\xd9\x98\xf3eP$\a\xcd\x99\x9f\x95e\x7f\xf4\xb4D\xb3\xd82^\xb6\xb07Z\xaf\xee\xb5\x89\xbe\xe0\xe2\x1f}\xfaU\x9e\xf2\x1c\\7\x89\xa9 1\xc3\xe2@B\x13\x9fi\r\xac\x06\xc6\'8\xe7\x9a\xed\x90\x15\xaa\xd8L.\x17\xb1\xb7\xcfo\xb2\x8b\xe5\xb3\x85)\xa4M\x18\xd5\xce\xd1A\x1d\xa9E;\xdf\'\xb1\xf0h\x14\x17\x15\xe5\xf2%\x8e\xb2\xb5\xd7\xff\x01\x00\xccDd\xcd\xe9>\xb7\xa9?;\xa7\xa0\aA\x97\xfan\v\x02l\x19?\x996\x8a\x0f;\x14\xba\xf8\x14\x17\xfe\xa6W', 0x0) 17:32:21 executing program 5: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0xc, 0x103, 0x5, {0x800, 0x0, 0xc1}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) 17:32:22 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10) 17:32:22 executing program 0: delete_module(&(0x7f0000000000), 0x0) delete_module(&(0x7f0000000100)='\x00', 0x200) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c3cadaf3f4c047179270673000000", @ANYRES16=0x0, @ANYBLOB="00012abd6000ffdbdf250300000008000200020000000800020002000000080001000300000008000100000000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000064}, 0x4040850) 17:32:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) 17:32:22 executing program 5: prctl$PR_GET_SECCOMP(0x15) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 1: delete_module(&(0x7f0000000000)='\xc11\x90\xdf\f\xb5\xa0\xb8T\x9ea\x91\xc3\xe8hj\xec\x03\x8ag\x95\x04\xd6\xd1&\xb2\xcbN\xf3h\xd7\xc9\x11\xf4\x1c \xde\xdb\xa6#\x02y\x91\x1fp\xb4\x97\x1c\x00\x00BOkzK\x12\xe7\x83\xd5\x81$\x18p\xde\xcc\\\x1c\x95T\xed\\\x1d~\x040N\x8d\\N>\xca\x1f\xd5\xf4>\x16D\xcd\xd6\xe6i-&2\xb4\xcd\x02\x9d\x8bh\x13h\xc8~\x06\x00\x00\x008\x02\xac\x88\x13\xb0\tD\x18\x9f\"\x13\x1e\xe92\xc2%4C\xba\xca\x03N\x9a\xdf0>\x1e\xcf:\v\xec4\x93{e7\xeb\xa6\xf9-\xa0\xebqR\x88\xb0\xcc\x8fb\xc0\xe7\xee\x10\x96\x90\x14\v\xf7\x83Q\xde4$X\xfd\x0e\xb8#\xb3_G\xdc\xd9\xfa\xc0f/\xdd\xbf\x00'/208, 0x0) delete_module(&(0x7f0000000100)=' \xf6\xbco\xbd\xbc', 0x800) delete_module(&(0x7f0000000140)='@[[(\xd5\x00', 0x0) 17:32:22 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) waitid$P_PIDFD(0x3, r1, 0x0, 0x1, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @broadcast}, &(0x7f0000000040)=0xc) 17:32:22 executing program 0: restart_syscall() delete_module(&(0x7f0000000000)='\xc5\x81:\x16\f:\xe5\xdeg\x90\xdf\x85\x98\x05\x1b\x10\x0e\xf0Q\x01|\xb3S\xac\xe2\x8b{\x17\x11\xcfe\xe8\xba*\xcf\x7f\x10r\x16\xe9\xebF5\x13\xc3\xfe\x83\xb6\xa0\xe5\xe4\x1cTuf+P\x06i\x9e]\xac\xaf0`f\x9f\xf9\x9fu\xb3M\xcal|\x85\xd1\x9f\xbd\xd0dR\x8d\x9b\xb8\x9f*L\x9c\xee\xf4\xe8\xdf\'\'\x01q\x7f\x86\xc2 \x97\x7fU\xaf', 0x800) 17:32:22 executing program 4: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x6, 0x4) socket$inet6(0xa, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x1003) 17:32:22 executing program 1: delete_module(&(0x7f0000000000)='\xc11\x90\xdf\f\xb5\xa0\xb8T\x9ea\x91\xc3\xe8hj\xec\x03\x8ag\x95\x04\xd6\xd1&\xb2\xcbN\xf3h\xd7\xc9\x11\xf4\x1c \xde\xdb\xa6#\x02y\x91\x1fp\xb4\x97\x1c\x00\x00BOkzK\x12\xe7\x83\xd5\x81$\x18p\xde\xcc\\\x1c\x95T\xed\\\x1d~\x040N\x8d\\N>\xca\x1f\xd5\xf4>\x16D\xcd\xd6\xe6i-&2\xb4\xcd\x02\x9d\x8bh\x13h\xc8~\x06\x00\x00\x008\x02\xac\x88\x13\xb0\tD\x18\x9f\"\x13\x1e\xe92\xc2%4C\xba\xca\x03N\x9a\xdf0>\x1e\xcf:\v\xec4\x93{e7\xeb\xa6\xf9-\xa0\xebqR\x88\xb0\xcc\x8fb\xc0\xe7\xee\x10\x96\x90\x14\v\xf7\x83Q\xde4$X\xfd\x0e\xb8#\xb3_G\xdc\xd9\xfa\xc0f/\xdd\xbf\x00'/208, 0x0) delete_module(&(0x7f0000000100)=' \xf6\xbco\xbd\xbc', 0x800) delete_module(&(0x7f0000000140)='@[[(\xd5\x00', 0x0) 17:32:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) [ 592.033413] nbd: must specify a device to reconfigure 17:32:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x800}) uname(&(0x7f0000000100)=""/251) r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x0) 17:32:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x6, 0x24240) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x40) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x9, 0x0, 0x10000}) clock_gettime(0x4, &(0x7f00000001c0)) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000140)={r3, 0x3ff}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@private0}, &(0x7f00000000c0)=0x14) 17:32:22 executing program 1: delete_module(&(0x7f0000000000)='\xc11\x90\xdf\f\xb5\xa0\xb8T\x9ea\x91\xc3\xe8hj\xec\x03\x8ag\x95\x04\xd6\xd1&\xb2\xcbN\xf3h\xd7\xc9\x11\xf4\x1c \xde\xdb\xa6#\x02y\x91\x1fp\xb4\x97\x1c\x00\x00BOkzK\x12\xe7\x83\xd5\x81$\x18p\xde\xcc\\\x1c\x95T\xed\\\x1d~\x040N\x8d\\N>\xca\x1f\xd5\xf4>\x16D\xcd\xd6\xe6i-&2\xb4\xcd\x02\x9d\x8bh\x13h\xc8~\x06\x00\x00\x008\x02\xac\x88\x13\xb0\tD\x18\x9f\"\x13\x1e\xe92\xc2%4C\xba\xca\x03N\x9a\xdf0>\x1e\xcf:\v\xec4\x93{e7\xeb\xa6\xf9-\xa0\xebqR\x88\xb0\xcc\x8fb\xc0\xe7\xee\x10\x96\x90\x14\v\xf7\x83Q\xde4$X\xfd\x0e\xb8#\xb3_G\xdc\xd9\xfa\xc0f/\xdd\xbf\x00'/208, 0x0) delete_module(&(0x7f0000000100)=' \xf6\xbco\xbd\xbc', 0x800) delete_module(&(0x7f0000000140)='@[[(\xd5\x00', 0x0) 17:32:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0x2a, 0x0, &(0x7f0000000100)="8e0d4948cf42fa48ed45904e45f2297ad4af15910ed52a51c9c9c2ed7ca844bc098146b138c200a2b01b3517a33608abe066bbedc1a3155fc5fc57b9d16be8bc3e607471d91f0357c4b102cec45892bdba259b74449551f897b47320d8a23492900bc01b4734586990c3860862cff7731a98d2ea562865b7a55e8ccf42fe1a714c4e7da4165293bc35ff0c3bee040a6627b4a2cb19268330c7cb634162abd23c61710b9ec7", {0x6, 0x1f, 0x38303553, 0x6, 0x7, 0x6, 0xa, 0x6}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f00000000c0)={0x0, 0x23, &(0x7f0000000080), {0xa00000, 0x7, 0x49433553, 0x4, 0x4cfd, 0x7fff, 0x8, 0x7}}) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000040)={0x3, 0x101, 0x0, {0x80, 0x80, 0x2, 0x80}}) 17:32:22 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @dev}, &(0x7f00000000c0)=0xc) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x2) bind$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r2) [ 592.165157] nbd: must specify a device to reconfigure 17:32:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 4: socket$inet6(0xa, 0x3, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), 0x4) 17:32:22 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x8000) delete_module(&(0x7f0000000000), 0x0) delete_module(&(0x7f0000000000)=':{\x00', 0x1000) 17:32:22 executing program 3: socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x3}}, 0x10) 17:32:22 executing program 1: delete_module(&(0x7f0000000000)='\xc11\x90\xdf\f\xb5\xa0\xb8T\x9ea\x91\xc3\xe8hj\xec\x03\x8ag\x95\x04\xd6\xd1&\xb2\xcbN\xf3h\xd7\xc9\x11\xf4\x1c \xde\xdb\xa6#\x02y\x91\x1fp\xb4\x97\x1c\x00\x00BOkzK\x12\xe7\x83\xd5\x81$\x18p\xde\xcc\\\x1c\x95T\xed\\\x1d~\x040N\x8d\\N>\xca\x1f\xd5\xf4>\x16D\xcd\xd6\xe6i-&2\xb4\xcd\x02\x9d\x8bh\x13h\xc8~\x06\x00\x00\x008\x02\xac\x88\x13\xb0\tD\x18\x9f\"\x13\x1e\xe92\xc2%4C\xba\xca\x03N\x9a\xdf0>\x1e\xcf:\v\xec4\x93{e7\xeb\xa6\xf9-\xa0\xebqR\x88\xb0\xcc\x8fb\xc0\xe7\xee\x10\x96\x90\x14\v\xf7\x83Q\xde4$X\xfd\x0e\xb8#\xb3_G\xdc\xd9\xfa\xc0f/\xdd\xbf\x00'/208, 0x0) delete_module(&(0x7f0000000100)=' \xf6\xbco\xbd\xbc', 0x800) 17:32:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0xf081, 0x1ff}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000000c0)={0x1, "f2c84008533eb4dcd71ce91dd7e4bf73299aeee908f31cce4761edde89caf8cd"}) 17:32:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 1: delete_module(&(0x7f0000000000)='\xc11\x90\xdf\f\xb5\xa0\xb8T\x9ea\x91\xc3\xe8hj\xec\x03\x8ag\x95\x04\xd6\xd1&\xb2\xcbN\xf3h\xd7\xc9\x11\xf4\x1c \xde\xdb\xa6#\x02y\x91\x1fp\xb4\x97\x1c\x00\x00BOkzK\x12\xe7\x83\xd5\x81$\x18p\xde\xcc\\\x1c\x95T\xed\\\x1d~\x040N\x8d\\N>\xca\x1f\xd5\xf4>\x16D\xcd\xd6\xe6i-&2\xb4\xcd\x02\x9d\x8bh\x13h\xc8~\x06\x00\x00\x008\x02\xac\x88\x13\xb0\tD\x18\x9f\"\x13\x1e\xe92\xc2%4C\xba\xca\x03N\x9a\xdf0>\x1e\xcf:\v\xec4\x93{e7\xeb\xa6\xf9-\xa0\xebqR\x88\xb0\xcc\x8fb\xc0\xe7\xee\x10\x96\x90\x14\v\xf7\x83Q\xde4$X\xfd\x0e\xb8#\xb3_G\xdc\xd9\xfa\xc0f/\xdd\xbf\x00'/208, 0x0) 17:32:22 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x100000001, 0x800) delete_module(&(0x7f0000000000), 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x5d) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000040)) 17:32:22 executing program 3: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/123, &(0x7f00000000c0)=0x7b) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$inet(0x2, 0x807, 0xc0e) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:22 executing program 4: add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x0) 17:32:22 executing program 1: delete_module(0x0, 0x0) 17:32:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4, 0x8500) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) 17:32:22 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:32:22 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={r1, 0x8}) delete_module(&(0x7f0000000000), 0x0) 17:32:22 executing program 1: delete_module(0x0, 0x0) 17:32:22 executing program 4: delete_module(&(0x7f0000000000)='\x00', 0x800) socket$inet6(0xa, 0x3, 0x0) 17:32:22 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x2, 0xffffffff}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x4, 0x200000) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0x6, {0x4004, 0x3, 0x10000, 0xffffff80}, {0x6, 0x3, 0x8000, 0x939a}, {0xffffffff, 0x7}}) 17:32:22 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0xc) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0xc, 0x0, 0x0, {0x6, 0x2, 0x66, 0x7}}) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) 17:32:22 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x40000) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @motion_det}) delete_module(&(0x7f0000000000), 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) exit(0x8001) 17:32:22 executing program 1: delete_module(0x0, 0x0) 17:32:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000001c0)={0xa, @win={{0x4, 0x1, 0xad, 0x800}, 0x3, 0x7fffffff, &(0x7f00000000c0)={{0x7, 0x200, 0x4, 0x8}, &(0x7f0000000080)={{0xfffffffa, 0x2178, 0x1235010d, 0xffffffff}, &(0x7f0000000040)={{0x5, 0x100, 0x2, 0x1}}}}, 0x0, &(0x7f0000000100)="55c0b65a111fae6badcbfef440fddfcd2d666437dbdc54272c0bc8af8493ac85256a103efd91eaca5b30866466b3560d97e3ee3b90c5295e41d5bf4f16f33c6a8a9a3dbc60ff68fe787fadb86058f8bad3c63552fe72885cc9e3cebc60c33f12fbef635d43aab29c54bfff5de3fef3f5baa31797cf8bbb1cd4661025117dcb37ba1832b5424ef6756d846408eff8dbcc156629f347233910387b6e6c653e4f602971dc80eaa02998ab0f415b96d949e36c5da5fe5057f0e4a8", 0x1}}) 17:32:22 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 3: r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0xffffffe0, 0x4) 17:32:22 executing program 4: socket$inet6(0xa, 0x800, 0xfffffffe) 17:32:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 3: bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) ptrace$setsig(0x4203, 0x0, 0xcb5, &(0x7f00000000c0)={0x37, 0xffffffff, 0x9}) 17:32:22 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:22 executing program 4: socket$inet6(0xa, 0x3, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_getscheduler(r0) 17:32:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x1, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x38303553}) 17:32:23 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x800}) uname(&(0x7f0000000100)=""/251) r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x0) 17:32:23 executing program 0: r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) r1 = getpgid(r0) delete_module(&(0x7f0000000000), 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x80, &(0x7f0000000000)=""/183) 17:32:23 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0xab1, 0x4) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:23 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0x682a, 0x6, 0x400, 0x628, 0x1, 0x8000, 0x1, 0x6, 0x200, 0x9, 0x400, 0x1709, 0x0, 0xdc, 0x1ff, 0x2, 0xfffffffa, 0x784f, 0x4, 0x0, 0x9, 0x2, 0x81, 0x2, 0x1, 0xac, 0x9, 0x2, 0x2, 0x20, 0x5, 0x97f]}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) geteuid() ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x37b2, 0x2, 0xffff8ff3, 0x8, 0x64e, 0x7, 0x7, 0x401]}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x9, 0x1, 0x1015, 0x2, 0xc, 0x8}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba40600040000008cb12460c901"}) 17:32:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:23 executing program 1: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:23 executing program 4: ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000000)={0x2, "449a38220a8a1861f4054fcba626b8a4a10ffd6612f41a2a383b595ad590f082", 0x6}) socket$inet6(0xa, 0x4, 0x23a) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x14001) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000000c0)) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) 17:32:23 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/20, &(0x7f00000000c0)=0x14) bind$tipc(r0, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) fstat(r0, &(0x7f0000000000)) 17:32:23 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f00000001c0)={"f885fefe7654ab6c36469da9407ee1827183927ceafbb9b6a956790acee5", 0x4, 0x0, 0x1, 0x0, 0x2, 0x5fa6, 0x1, 0x3, [0x4dd744a5, 0xf6, 0x5, 0x3, 0xaa9, 0x7fffffff, 0xb9d7, 0x4, 0x5, 0x81, 0x81, 0x80, 0x8001, 0xf95a, 0x101, 0x0, 0x6, 0x7, 0x6]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x200042, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x202000, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r5 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PRIORITY(r5, 0x80045643, 0x1) 17:32:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80801, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:23 executing program 1: prctl$PR_GET_SECCOMP(0x15) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:23 executing program 0: delete_module(&(0x7f00000000c0)='R_e\xb9\xe1p6?\xca\xcd\xc2\x8a \xb3H\x9a0\x03(B\xa6\xa8\xcc\xab\b]\xff\xbb\xfb\x18\x1c\x1chk\x00\xdc:\x95\xe6\xa7\xc0\xae\x94<`D\xe95\x00X\x1a\xb6\xd3\xe61 \xa4\r\xf6\xf6\v\xbc\xfaD]\xb7\x96\xc7Fx@\xe8\xd4mNd\x11\x1b\xb4\xf1\xb4\xa8\xb6\xbe\xf9\xd2\x80\xce\xf9\x9a\xa7\xf3|\xcd\xff\xd3\xca)]Zo$*\x90t\xe2j\xa2\xaa\xe7\xd4\x7f9\x9dS\x82\xc3\xc8(\xa1\xfa&\x11\xea\'\x9fH2\xee', 0xa00) 17:32:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:23 executing program 1: r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) r1 = getpgid(r0) delete_module(&(0x7f0000000000), 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x80, &(0x7f0000000000)=""/183) 17:32:23 executing program 0: delete_module(&(0x7f0000000000), 0x0) 17:32:23 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x430400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet6(0xa, 0x3, 0x0) 17:32:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x20000800) 17:32:23 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x4000) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0x8) 17:32:23 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x5, 0x7, 0x1, "98e562146a0066aa2d342460c90400", 0x32525942}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) 17:32:23 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:23 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snd/timer\x00', 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000540)=0x1) getgroups(0x5, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0x0]) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000340)) r4 = getgid() getgroups(0x4, &(0x7f0000000440)=[r4, r2, r1, r1]) getegid() getgid() fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000400)=[0x0, r1, 0xffffffffffffffff, r3, r6, r5, 0xee00]) delete_module(&(0x7f00000000c0)='\x80\xb3\xb2\x8c\xf7\x8bz\xdf\xf4\xc6\xc2;\xfc\x0f\xd2\xa8\xcb6\"\\\x13\x87@Q\x18\b\xff\xa9\xe2D\xa4vF\xe3(>\x05\x00\aG\xdb\xde\x9f\xe2\x1a\x18UH\\B\xff?\a%\x99\xde\x0f\x7f&0\xac\x82\xf6\xab\x13X\x82!\x9b<\x91Nf\x17_\x93\xc6C\xa6\xbbT\xbc\xeeK\x92\xcd<;\xb3\x10f\xb5\\\xf5%\xa3\x82|\\B\a\xd1\xa5\xa3\xd2\xb4\x05.9\x81\xf9r\xd4\xaf\xff\x81\xe9\x98\x05\xbaT\x1d\xe8\xc8\xa0\x0e=\xe5\xd1\x9aA:/M\x99DcG\xa3\xbf\x1bJ\x9a\x0f\"+\xb2\x02B\x8b\xa7\xae\x0fZ\xd9\xdf \rRs\xfbb\xdc?\xd6\n\xc1\xa8\xdft0xffffffffffffffff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x402000, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2fe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x40000d0) 17:32:25 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xb, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) 17:32:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:25 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'ip6_vti0\x00'}) 17:32:25 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000000c0)={0x400, "9e0366e15b30a232e42007c97ab1c69e7200810115e4df46fda8b112b47499f6", 0x2, 0x101, 0x0, 0xe0, 0x1000800, 0x2}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x6002a0, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000080)) 17:32:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:25 executing program 0: delete_module(&(0x7f0000000000), 0x0) r0 = getpid() getpgid(r0) 17:32:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:25 executing program 2: ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f00000000c0)={0x2, "5792c27b7dfafbb3e22074614ec363121b9bf86891dee43934c2719acaa551b3"}) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x242981) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0xfff, 0x100, 0x5, 0xed8}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xfffffffd, 0x7, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904", 0x42474752}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8201, 0x0) 17:32:25 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:32:25 executing program 0: delete_module(&(0x7f0000000180), 0xc00) delete_module(&(0x7f0000000000)='0a\x1bo2\x8b\xd7Y\xa62\t\x01k\xb1\xfe\x87\xc0.\xcf\xb6Tm\x87ynq\xcc\xd5\xbf;`\x85\xba\xbbN\x9a\x9b\xed\xfc\x19\x16\x85\xbb)\x1c\x81\'\x86\xa4F\xa2\xdfK\x1b\xc2S\x11\xd1\xfe\xaa\xf0\'\x86\xa9\xb5=&\x04\x05\xc07\xcc\x93a\xb2v~q2\xda\xfeW\xe3Z\xf0\x80c\x03\x1b\xbd\xdc[\xd4tK\xa2X\x1f\x99\xaaS\x80 \t\xf4\xd2:7\xdf(/R\x17\x10\xac\xb0\x97\xd2\xf0\xa6N\xdd\x8dV\xdaHD\xb1\xe5\x18\r\x1cs]\x93\x9d\x8c\x95\xb1\x94\x1d', 0x800) delete_module(&(0x7f00000000c0)='0a\x1bo2\x8b\xd7Y\xa62\t\x01k\xb1\xfe\x87\xc0.\xcf\xb6Tm\x87ynq\xcc\xd5\xbf;`\x85\xba\xbbN\x9a\x9b\xed\xfc\x19\x16\x85\xbb)\x1c\x81\'\x86\xa4F\xa2\xdfK\x1b\xc2S\x11\xd1\xfe\xaa\xf0\'\x86\xa9\xb5=&\x04\x05\xc07\xcc\x93a\xb2v~q2\xda\xfeW\xe3Z\xf0\x80c\x03\x1b\xbd\xdc[\xd4tK\xa2X\x1f\x99\xaaS\x80 \t\xf4\xd2:7\xdf(/R\x17\x10\xac\xb0\x97\xd2\xf0\xa6N\xdd\x8dV\xdaHD\xb1\xe5\x18\r\x1cs]\x93\x9d\x8c\x95\xb1\x94\x1d', 0x100) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) 17:32:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:25 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_FM_LOAD_INSTR(r3, 0x40285107) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f0000000040)=0x551) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000280), &(0x7f00000002c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000300)=""/140, 0x40f00, 0x1a, [], 0x0, 0x1b, r5, 0x8, &(0x7f00000003c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x8000, 0x1}, 0x10}, 0x78) 17:32:25 executing program 4: socket$inet6(0xa, 0x4, 0x4) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r2, 0x0, 0x8, &(0x7f0000000080)='+\f-*!]-\x00'}, 0x30) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='+\f-*!]-\x00'}, 0x30) 17:32:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:25 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0xfffffffe, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x1000, "b6bb4fade21ca78ae538290dc057c739b97dc39fc679ea1514e02a6a5ad45cc9", 0x3, 0xfffff631, 0x1, 0xe0, 0x100}) 17:32:25 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000200)={0x0, "ee46baeb8bc9517e654a91febb65aefa5938cb6bd5e7c71c5215d3c79cf7aa4e0a75a58e692e48273b26ca5aeeca211aadcb8874794c0de4e25074e47bf1def1", 0x14}, 0x48, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, 0x0, 0x0) keyctl$link(0x8, r1, r2) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="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", 0xfc, r0) delete_module(&(0x7f0000000300)='\x1a\xe6\x82\x8e#u\xa3>\x06\xd9\x94\xa2(\xbe\x8fA<', 0x200) 17:32:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:25 executing program 3: socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) 17:32:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:25 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x400, 0x5, 0x0, "98e5e2ebbc7dd20400000000000000123c1e1bc90402000000002000408000"}) 17:32:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:25 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x127000) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) 17:32:25 executing program 0: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9) delete_module(&(0x7f0000000000), 0x0) 17:32:25 executing program 4: socket$inet6(0xa, 0x3, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) write$tun(r1, &(0x7f0000000140)={@void, @val={0x2, 0x0, 0x7fff, 0x1b30, 0x32f, 0x8}, @x25={0x1, 0x7, 0xf3, "5704c7e17c7b719c65b24760d190d8a27a069e93b4ec4fe9a45e28755f9fa3a6aef0287eaf2fcc33421363ade7f35901b50716428d63ee0e6472c64453be360fab05fee6fdeb27cba8b3271c5ba5630fb9488321c1ccb5d8f1e9a34ec34892d61be516904eaaa3a70bc001974a3dce"}}, 0x7c) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000100)=r2) 17:32:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) [ 595.864184] nbd: must specify a device to reconfigure 17:32:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 3: bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:26 executing program 0: delete_module(&(0x7f0000000000), 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0xd4}, 0x8000) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x1) 17:32:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) [ 595.935874] nbd: must specify a device to reconfigure 17:32:26 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) fstat(r0, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2082, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000001c0)={0x0, 0x0, [0x8001, 0x81, 0x3, 0x7, 0x9, 0xffffff81, 0x1, 0x7]}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000040)) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) fstat(r1, &(0x7f0000000140)) 17:32:26 executing program 0: delete_module(&(0x7f0000000000), 0x0) 17:32:26 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) [ 596.016860] nbd: must specify a device to reconfigure 17:32:26 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x1, 0x3}}, 0x10) 17:32:26 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x3, 0xd, 0x2542, 0x7, 0xf174, 0xfffffffbfffffffd, 0x7a9, 0x2, 0x7}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x1, 0x4, 0x80000001, 0xff800, 0x1, 0xf25, 0x2, 0x9, 0x10001}, 0x0) socket$inet6(0xa, 0x3, 0xd5) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x440000, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) 17:32:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 0: delete_module(&(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) bind$tipc(r1, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd700007000000050000000c00080000000000000100000000000000789a8f1e63cf7879d26a068d060001000000000000000c0004000700001000000000040007800c0082000000000000000000"], 0x48}}, 0x40040) 17:32:26 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x200) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 17:32:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x2, 0x2, "98e56270b87dfb1a5b5806000000f288740900", 0x32314d54}) 17:32:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) fstat(r0, &(0x7f0000000080)) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r3, 0x80085617, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x820010c4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5ef}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008800}, 0x10) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000140)={0x0, @motion_det}) getsockopt$inet6_mreq(r1, 0x29, 0x4, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) 17:32:26 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x208cc0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f00000000c0)=0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffff4, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1f00, 0x6, [], r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xb167, 0x8, 0x6239b11d}, 0x10, 0xffffffffffffffff}, 0x78) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x404400, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r2, r4, 0x4, r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1b, 0x64, 0xffffffff, 0xff, 0x0, r2, 0x7, [], r3, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x40) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) [ 596.205920] nbd: must specify a device to reconfigure 17:32:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 0: syz_extract_tcp_res(&(0x7f00000000c0), 0x5, 0xffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) delete_module(&(0x7f0000000100)='?\xd9r\xb1\xb1\x9e`\xc3\x02.\xb5SF\xa7g\x85\xae\x1e\x99xe\x00#~r\xb6de\x86L\x84\xdf\xa6\xdb_\x97\xe0bKR\x10k_\xe1\xed\x85FGY\x89\x1f\xdb5\x97\x03\xe2\x92\xe3$\xce\xb3\xe5\xee\xc2d\xe3\xa2', 0x0) 17:32:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xfffffffe, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000040)={0x10000, "124a8bafc347314a9029ea2695f6070cc768e499c7e254a6d457f3f012c9cc4c", 0x1, 0x2, 0x3, 0x20000, 0x2000120, 0x2}) 17:32:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 0: delete_module(&(0x7f0000000040)='\xf2\x8f\xd4o\xa6T\xd4\x0fB\xe4\xb4/\x9d}\xf9B\xef;e9\xac\xe1\xb8\xf1C\xcbv\xc8j5\xc3\xf9\xb7\xf2\xbb\xce\xde\xbc\xda\xc0\xad?\xcb\xa4\xf3_\xc8L\xa4$\xf1u\x12\x93\xcb\x87\xd9\x04\xf8\xe8\xf6\xa1\xcf\x8dPR', 0x0) delete_module(&(0x7f00000000c0)='\xf2\x8f\xd4o\xa6T\xd4\x0fB\xe4\xb4/\x9d}\xf9B\xef;e9\xac\xe1\xb8\xf1C\xcbv\xc8j5\xc3\xf9\xb7\xf2\xbb\xce\xde\xbc\xda\xc0\xad?\xcb\xa4\xf3_\xc8L\xa4$\xf1u\x12\x93\xcb\x87\xd9\x04\xf8\xe8\xf6\xa1\xcf\x8dPR', 0xa00) getegid() 17:32:26 executing program 3: bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100)=0xff, 0x4) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x9, &(0x7f0000000000)=[{0x2, 0xfb, 0x1, 0x8}, {0x8, 0x20, 0xff, 0x8}, {0x8001, 0xff, 0x1f, 0x1}, {0x6, 0x9, 0x37, 0xe0}, {0x200, 0x9, 0x2, 0x1}, {0x7, 0x15, 0x88, 0x5}, {0x401, 0x96, 0x5, 0x4}, {0x7, 0x1, 0x1, 0x6}, {0xfff, 0x6, 0x9, 0x10001}]}) [ 596.344974] nbd: must specify a device to reconfigure 17:32:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 4: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x80000001, 0x5, 0x2, "1d40efce6897e3002a9ca809a6ce83808d961498f8813a53bca2be38f3c5a9da", 0x20385655}) socket$inet6(0xa, 0x3, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r1, 0x0, 0x6, &(0x7f0000000000)='\\\xd0+({\x00'}, 0x30) 17:32:26 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x8, 0x6, 0xfff, 0xfffffff8}}) 17:32:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 3: ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f00000000c0)=0x9) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x23, 0x1, 0xfffffffc}) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x1}}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x40, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000140), 0x1000000, 0x0) 17:32:26 executing program 0: capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x8001, 0x0, 0x1, 0x80000000, 0x7ff}) delete_module(&(0x7f0000000000), 0x0) [ 596.473551] nbd: must specify a device to reconfigure 17:32:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:26 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) 17:32:26 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x400000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000200)) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) fstat(r3, &(0x7f0000000240)) 17:32:26 executing program 0: delete_module(&(0x7f00000001c0)='\xc3\xce\xb7\xda\x96T\xe0~\x0e$)U74>\xd5\x1dc\xefP\xf1\xb5\xc9\rq\x0e\x93\x84\xad\xaeP\xc5\xad\xa9\x83\xc3i\xaa\xba\xcd=\xda>\xee\xde\xc9K\x1cr\xdd-\x8a\xd2\x86!\xc6\xf2\xd4\xa9_&\xf7\x82\x1a\xa1\xc5\x11)\xed\xf8g\x1f\xb5U\xf4Er\x96\xa1=\xc1\x9e5\xc4\x8f\xc3T\\\xfa<\x06+\xd9\r\xd9\xa2\x06\b\xf0\x1a\x02\xd9\xa8k\xaa\xffm\xdc$\x94}\xcfa\x89\x926#\x9b\xa6H\x9a\xe4\xe5\x12 \x11\xf0\v_[\x97\xe59O\xe2\xab\xe8}\x89\xe2\x9c\v!\x80\xd7\xb0\xa9\xb8I\xadAn,Z\x16\vO\x1a\xa1;G~\x12:\xc1\xe2Fk\xb2\xc80x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@getsa={0x19c, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {@in6=@mcast1, 0x4d3, 0x2, 0x6c}, [@sa={0xe4, 0x6, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0x180, 0x20, 0x33, r2, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0xff}, @in6=@remote, {0x3ff, 0xe74a, 0xdc, 0x2, 0x6, 0x10000, 0x100000000, 0x7}, {0xfffffffffffffffa, 0x80, 0x4, 0x81}, {0xcfab, 0x1, 0x3}, 0x70bd2d, 0x0, 0xa, 0x1, 0x7, 0x2}}, @policy_type={0xa}, @tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x4d4, 0xff}, 0xa, @in=@local, 0x3507, 0x3, 0x1, 0x2, 0x8, 0x5, 0x572f}, {{@in=@multicast2, 0x4d5, 0x33}, 0x2, @in6=@private0, 0x3501, 0x2, 0x2, 0x4, 0x5, 0x3, 0x5}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040084) [ 596.827426] nbd: must specify a device to reconfigure 17:32:27 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000040)={0x3, 0x1, @stop_pts=0x7}) 17:32:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x20000800) 17:32:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:27 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfb38}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x2400a180) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x10) 17:32:27 executing program 0: delete_module(&(0x7f0000000000), 0x0) socket$packet(0x11, 0x0, 0x300) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) sched_getscheduler(r0) 17:32:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:27 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000100)={0x4, "fe9f566e272650ae6fc6b3d1cc04b1bceff19f66d5520107000054624439b488", 0x3, 0x1}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "98e562ebbc7dd2db1d7a824ff226a0123c1e1ba4a500668a2d348cb12460c904"}) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000080)) time(&(0x7f00000000c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x341901, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000001c0)={0x2, 0x1, [0x1663a4e7, 0x8, 0x2, 0x8, 0x101, 0x101, 0x1f, 0x2f]}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x8000005}, 0x8) [ 596.975392] nbd: must specify a device to reconfigure [ 597.030161] BUG: unable to handle kernel NULL pointer dereference at 0000000000000030 [ 597.038185] IP: amp_read_loc_assoc_final_data+0xe6/0x190 [ 597.043677] PGD 7e402067 P4D 7e402067 PUD 7e403067 PMD 0 [ 597.049225] Oops: 0002 [#1] PREEMPT SMP KASAN [ 597.053711] Modules linked in: [ 597.056911] CPU: 1 PID: 1674 Comm: kworker/u5:0 Not tainted 4.14.221-syzkaller #0 [ 597.064553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.073932] Workqueue: hci1 hci_rx_work 17:32:27 executing program 3: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x10000006, 0x5a9d5927, 0xe9, 0x8, 0x3, 0xa000, 0x0, 0x4}, 0x0) socket$tipc(0x1e, 0x5, 0x0) 17:32:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:27 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f00000000c0)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) 17:32:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) [ 597.077924] task: ffff8880b29c85c0 task.stack: ffff8880b29e8000 [ 597.077939] RIP: 0010:amp_read_loc_assoc_final_data+0xe6/0x190 [ 597.089964] RSP: 0018:ffff8880b29efa08 EFLAGS: 00010246 [ 597.095345] RAX: 0000000000000000 RBX: 1ffff1101653df41 RCX: 1ffff110165391d3 [ 597.102609] RDX: 1ffff1100f52943b RSI: ffff8880b2e40040 RDI: ffff88807a94a1d8 [ 597.109960] RBP: ffff8880b2e40040 R08: 0000000000000000 R09: 0000000000000002 [ 597.117226] R10: 0000000000000000 R11: ffff8880b29c85c0 R12: ffff88807a949e40 17:32:27 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 17:32:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:27 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000000c0)={"10d0609e919ad36cae18d8dca0fd89d191133b498af4cbeb9cec22dbf66b", 0x5, 0x2, 0x401, 0x1, 0x8, 0x77dd5c9f, 0x0, 0x4, [0xfffffffa, 0x7df, 0x3, 0x7, 0x2, 0x9, 0xc9, 0x9, 0x400, 0x273d, 0x1c1, 0x0, 0x8, 0x7fffffff, 0x6, 0x7a, 0x7fffffff, 0x6, 0x1b]}) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x2}}, 0x10) syz_extract_tcp_res(&(0x7f0000000040), 0x3, 0x401) [ 597.124493] R13: 0000000000000000 R14: ffff88807a949e40 R15: ffff8880a55b7480 [ 597.131782] FS: 0000000000000000(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 597.139999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.145894] CR2: 0000000000000030 CR3: 000000007e401000 CR4: 00000000001406e0 [ 597.153187] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.160459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 597.167728] Call Trace: [ 597.170316] ? amp_read_loc_assoc+0x140/0x140 [ 597.174829] ? hci_chan_selected_evt+0x176/0x360 17:32:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 17:32:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00', r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) [ 597.179581] ? lock_acquire+0x170/0x3f0 [ 597.183552] ? lock_downgrade+0x740/0x740 [ 597.187705] hci_chan_selected_evt+0x1b2/0x360 [ 597.192288] hci_event_packet+0x2260/0x7510 [ 597.196604] ? trace_hardirqs_on+0x10/0x10 [ 597.200851] ? hci_cmd_complete_evt+0xb490/0xb490 [ 597.205688] ? trace_hardirqs_on+0x10/0x10 [ 597.209919] ? debug_object_deactivate+0x1da/0x2e0 [ 597.214844] ? skb_dequeue+0x125/0x180 [ 597.218742] ? mark_held_locks+0xa6/0xf0 [ 597.219747] nbd: must specify a device to reconfigure [ 597.222800] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 597.222809] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 597.222821] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 597.243183] hci_rx_work+0x427/0xb40 [ 597.246904] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 597.252359] process_one_work+0x793/0x14a0 [ 597.256600] ? work_busy+0x320/0x320 [ 597.260306] ? worker_thread+0x158/0xff0 [ 597.264450] ? _raw_spin_unlock_irq+0x24/0x80 [ 597.268945] worker_thread+0x5cc/0xff0 [ 597.272862] ? rescuer_thread+0xc80/0xc80 [ 597.277011] kthread+0x30d/0x420 [ 597.280369] ? kthread_create_on_node+0xd0/0xd0 [ 597.285044] ret_from_fork+0x24/0x30 [ 597.288753] Code: 44 24 21 48 b8 00 00 00 00 00 fc ff df 0f b6 04 02 84 c0 74 08 3c 01 0f 8e 90 00 00 00 41 0f b7 84 24 98 03 00 00 66 89 44 24 23 41 80 4d 30 04 48 8d 6c 24 40 4c 89 e6 48 89 ef e8 14 6c fe [ 597.307937] RIP: amp_read_loc_assoc_final_data+0xe6/0x190 RSP: ffff8880b29efa08 [ 597.315377] CR2: 0000000000000030 [ 597.318829] ---[ end trace eb011e6e2e74be15 ]--- [ 597.323572] Kernel panic - not syncing: Fatal exception [ 597.329397] Kernel Offset: disabled [ 597.333035] Rebooting in 86400 seconds..