AEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="69defa8117bfd79f36c2821d4753063406f7bbc8e5f37513c7b42bd98dbae3fd9ccc989b312f56358cff0f57fd7905ab87838e0e1b84c6254e28880d85ec36b5ce7ce9a28b51df3e8addfd575b61a15d67eb7451cf9d7793874336f173b34ddd762d1f25d5cc", 0x66, 0xfffffffffffffffb) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f00000001c0)="e0b04116ee4eb0a7961ed605ccdffec4090ffab1b75174613d70b0c984209b48d5d2b2bb5a250f3f1cafc640e6d70046c4847a17d262d40aca000511d0a2b2dfd4503d54594d79097519324441c663153a375a0b486dbe963b9298dab6cf45cb412486b75091b155a0d361da4557879f10dfaaadbce920a8f284695f9f4c7947d9b559673d12ab4cfcc8a60e9be2fddb3672786e1c42c1ed8e4a372a9e63f98cfb8e9cfd725a6bdc9e8142f24e626dfc500274699742fc118e9979b5a8bcfed9f56a4538b32415e72cb4aa6885fdd176766f5561e2b8", 0xd6) close(0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x6, 0x200) 10:11:10 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 677.664706][T13525] vhci_hcd: invalid port number 255 [ 677.675542][T13525] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:10 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000040)=0x100000001) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) [ 677.726407][T13537] vhci_hcd: invalid port number 255 [ 677.731798][T13537] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:10 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(r1, 0x0, 0x0) close(0xffffffffffffffff) 10:11:10 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x80003) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000240)={0xc, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e22, 0x2, 'lc\x00', 0x12, 0x401, 0x54}, 0x2c) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000000)='/dev/usbmon#\x00'}, 0x30) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f00000001c0)=[{0x5, 0x27, 0x9, 0x80000001}, {0x100000000, 0xa1b1, 0x6, 0x1}]}, 0x10) getgroups(0x7, &(0x7f0000000280)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, r4]) open_by_handle_at(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="76000000ffffffff4975476712957b69a912333a60da6b6dc211f05463d16f63b9ca48c38e843d4f48779d889da43b249a054df434514ac37c008bfc7563534ad3d1437a5dd2dad446f9f712f1025a73cf23b2d645707394cdbe5163220258d46ebe37f63c0037dfc859111170f26909648eab30572c"], 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r2, r3, r5}, 0xc) read(r0, 0x0, 0xfffffffffffffc75) 10:11:10 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:10 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40800, 0x121) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="76b7dfec70") read(r1, 0x0, 0x223) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xd2) [ 677.898688][T13735] vhci_hcd: invalid port number 255 [ 677.920205][T13754] IPVS: set_ctl: invalid protocol: 12 172.20.20.38:20002 [ 677.937407][T13735] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:10 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 677.975272][T13760] IPVS: set_ctl: invalid protocol: 12 172.20.20.38:20002 [ 677.997144][T13756] vhci_hcd: invalid port number 255 [ 678.019221][T13756] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 678.042852][ C0] net_ratelimit: 14 callbacks suppressed [ 678.042861][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 678.054632][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 678.060489][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 678.066620][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 678.282880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 678.289130][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:11 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x5) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e21, @local}, {0x307, @local}, 0x40, {0x2, 0x4e24, @broadcast}, 'irlan0\x00'}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="630000009ced22dbd2284a4dcd99618a94988bdb68521f7c2c8a508c591bea300e2aebe2372b59faea6221c76e61c327e586e04b05836b481dda039016607c927064beedf2b11e7cf98a361cfcbff9084576896047a15aa301ac062659b24c17531def9580a4d7cfded1ed"], &(0x7f00000001c0)=0x6b) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e23, 0xfffffffffffffffb, @local, 0x401}}}, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r1, @in={{0x2, 0x4e23, @empty}}, 0x100000000, 0xfff}, 0x90) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:11 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x4000, 0x0) 10:11:11 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x23fffffd, 0x2800) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(r1) 10:11:11 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x2) r4 = accept4(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'caif0\x00', 0x0}) recvfrom$packet(r4, &(0x7f0000000140)=""/158, 0x9e, 0x2000, &(0x7f0000000200)={0x11, 0x15, r5, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) shutdown(r4, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:11 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:11 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:11 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x8, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:11 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x144, r1, 0xa95825e04dd0b620, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x940000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @empty}}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad4d70f0000000000eab6") read(r0, 0x0, 0x223) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0x1, 0xf, 0x4, 0x2000100, {0x77359400}, {0x5, 0xb, 0x7, 0x5, 0x5, 0x3ff, "8ff436d0"}, 0x6, 0x2, @fd=r0, 0x4}) [ 678.704101][T14026] vhci_hcd: invalid port number 255 [ 678.714760][T14026] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:11 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:11 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 678.767788][T14185] vhci_hcd: invalid port number 255 [ 678.805163][T14185] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:11 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)={0x36, 0x3, 0x0, {0x3, 0x15, 0x0, '/dev/bus/usb/00#/00#\x00'}}, 0x36) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x100000001, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'bridge0\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:11 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x224000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, 0x0, 0x0) [ 679.003695][T14304] vhci_hcd: invalid port number 255 [ 679.026721][T14304] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 679.079600][T14389] vhci_hcd: invalid port number 255 [ 679.092940][T14389] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 679.172982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 679.179504][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:12 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:12 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:12 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:12 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) r1 = accept(0xffffffffffffffff, 0x0, 0x0) close(r1) 10:11:12 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f0000000040)) [ 679.523278][T14441] vhci_hcd: invalid port number 255 [ 679.533121][T14441] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 679.591127][T14471] vhci_hcd: invalid port number 255 10:11:12 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/52, &(0x7f0000000140)=0x34) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) read(r0, 0x0, 0x2f) [ 679.615842][T14471] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:12 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x9a09) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:12 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 679.704408][T14651] IPVS: length: 52 != 24 10:11:12 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 679.739208][T14655] IPVS: length: 52 != 24 10:11:12 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getrusage(0x1, &(0x7f0000000200)) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20020000) [ 679.797723][T14658] vhci_hcd: invalid port number 255 [ 679.813037][T14658] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:12 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setpipe(r0, 0x407, 0x7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x8, 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r2, &(0x7f0000465f8e)=""/114, 0x37) write$eventfd(r0, &(0x7f00000002c0)=0x4, 0x8) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x4) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000140)=""/230, &(0x7f0000000280)=0xe6) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000240)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) [ 679.883705][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 679.884398][T14668] vhci_hcd: invalid port number 255 [ 679.890339][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 679.913347][T14668] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:12 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@loopback, @local, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000001c0)={@rand_addr=0x100010, @broadcast, r2}, 0xc) ioctl$TIOCSBRK(r0, 0x5427) close(0xffffffffffffffff) [ 680.124848][T14856] vhci_hcd: invalid port number 255 [ 680.132517][T14856] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 680.164107][T14884] vhci_hcd: invalid port number 255 [ 680.169769][T14884] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:13 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r1, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000280)={0x9, 0x0, 'client1\x00', 0x2, "9ce66adb3d820c4b", "5ab6b10549b9cf34cf9a68b5becf43868082082e857f632fef70645ae0b35398", 0xf44e, 0x101}) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000340)={0x5, 0x3, 0x32, 0x4}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:13 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x7, 0x7ff, 0xae41]}, 0xa) read(r0, 0x0, 0xffffffffffffffd9) 10:11:13 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:13 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x20) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000140)=""/237) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:13 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(r1, &(0x7f0000000380)="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", 0xfffffd71) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:13 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 680.460674][T14897] vhci_hcd: invalid port number 255 10:11:13 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") fsetxattr$security_smack_entry(r1, &(0x7f0000000080)='security.SMACK64\x00', &(0x7f00000000c0)='/dev/usbmon#\x00', 0xd, 0x3) read(r0, 0x0, 0xffffffffffffff68) 10:11:13 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) [ 680.523853][T14897] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:13 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 680.608735][T14994] vhci_hcd: invalid port number 255 10:11:13 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 680.672491][T14994] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:13 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") prctl$PR_GET_KEEPCAPS(0x7) read(r0, 0x0, 0x223) 10:11:13 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) [ 680.815587][T15165] vhci_hcd: invalid port number 255 [ 680.842989][T15165] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 680.903714][T15234] vhci_hcd: invalid port number 255 [ 680.909143][T15234] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:13 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x5473, &(0x7f00000001c0)=0x5) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0) 10:11:13 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="33e8f48708e7cca59c2af14f13dce541f3e9d61f2e7ebbcebcebdd035719d51b799ab98a0d81eac3b65242119cb0324914e3b1d15cca4898d0509d0dfad45c03d52383eeab0623e7775260cfdb993357b85cf63ed1308832", 0x58, 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3f, @rand_addr="2953ca2021589a720886a3820855e349", 0x8}, {0xa, 0x4e24, 0x8, @ipv4={[], [], @multicast1}, 0x4}, r2, 0x2}}, 0x48) read(r0, 0x0, 0x2f) 10:11:13 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:13 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000016c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001740)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000001780)={0x25e8, 0x8000, 0x5, 0x48d34105, 0x0}, &(0x7f00000017c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001800)=r1, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)={0xa, 0x0, 0x100000000}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r1, 0xd8, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0xb}, 0x6}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x3}, @in6={0xa, 0x4e22, 0x7, @local, 0xffffffffffffffc0}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x10001, @rand_addr="0d3c9975fb690e7505c6194bbd6fdfc2", 0x8}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @rand_addr=0x8}, @in6={0xa, 0x4e23, 0x80000001, @rand_addr="91e826714fb742af7a73c5dbc45b8b72", 0xfff}, @in6={0xa, 0x4e20, 0x702, @mcast2, 0xffffffffffffc575}]}, &(0x7f00000000c0)=0x10) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r2, 0x0, 0x223) 10:11:13 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40401, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x68, &(0x7f0000000040)=0x4) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'os2.', '/dev/bus/usb/00#/00#\x00'}, &(0x7f00000001c0)='[\x00', 0x2, 0x2) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:13 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 681.369374][T15347] vhci_hcd: invalid port number 255 [ 681.419973][T15347] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 681.449903][T15368] vhci_hcd: invalid port number 255 [ 681.464964][T15368] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:14 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={r2, &(0x7f0000000140)=""/210}) read(r0, 0x0, 0x2f) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000012c0)=0xfffffffffffffff9, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001280)={r0, &(0x7f0000000240)="3db8a916ccbd002d79e2ec99f9e926186b4da426594c58d5c0a82783508113a22aaa14fa93190cfb41f4ca9ba77453cc1be0ee41f3dc1eb0a6ed904c4f34ad7d", &(0x7f0000000280)=""/4096}, 0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 10:11:14 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:14 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x3}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) read$rfkill(r0, &(0x7f0000000040), 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0xfffffffffffffd8c) ioctl$TCFLSH(r0, 0x540b, 0x4) 10:11:14 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1ff, 0x80000) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:14 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 681.694549][T15574] vhci_hcd: invalid port number 255 10:11:14 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, 0x0, 0x62) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 681.726743][T15574] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 681.805933][T15633] vhci_hcd: invalid port number 255 [ 681.812470][T15633] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:14 executing program 5: r0 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x63e2, 0x400) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x0, @loopback, 0xfffffffffffffff9}, @in={0x2, 0x4e24, @multicast1}], 0x2c) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x400000000005) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x0, 0xa, &(0x7f0000000180)='/dev/dsp#\x00', 0xffffffffffffffff}, 0x30) sched_setattr(r2, &(0x7f0000000240)={0x30, 0x2, 0x1, 0x2, 0x1000, 0x2, 0x401, 0x2}, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @broadcast}], 0x10) readv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:14 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0x20, 0x4) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="08d3c2719d5e5c2a25444f7589a70a9e0e1ca84b12db416f96697369b9ed27b6425dd8bd9972687a3e2fb4414d46d505657b04fc05", 0x35, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) close(0xffffffffffffffff) 10:11:14 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:14 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 682.290365][T15798] vhci_hcd: invalid port number 255 [ 682.303290][T15798] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:15 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r3, 0x0) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setfsuid(0x0) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/193, 0xc1}, {&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f00000002c0)=""/240, 0xf0}], 0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) [ 682.357856][T15893] vhci_hcd: invalid port number 255 [ 682.363631][T15893] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:15 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:15 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000040)='./file0\x00', 0x28) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) [ 682.598997][T16012] vhci_hcd: invalid port number 255 10:11:15 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) 10:11:15 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 682.677583][T16012] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:15 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:15 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="d44c6759eab0f773656375726974792e737e6c66242b00"], &(0x7f0000000140)=""/230, 0xe6) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x4, 0x4) 10:11:15 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 683.145533][T16012] vhci_hcd: invalid port number 255 [ 683.150792][T16012] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:15 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000300)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) fsetxattr$security_capability(r1, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x7fff, 0x9}, {0x1f, 0x6}]}, 0x14, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='/dev/dsp#\x00', r1}, 0x10) readv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:15 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:15 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") prctl$PR_GET_DUMPABLE(0x3) read(r0, 0x0, 0x2f) 10:11:15 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7ff, 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 683.323264][ C0] net_ratelimit: 16 callbacks suppressed [ 683.323274][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 683.334821][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:16 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:16 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:16 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x1c}, 0x8}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x8}], 0x38) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000280)={{0x401, 0x6}, 'port0\x00', 0xa1, 0x408, 0x0, 0x7ff, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x6, 0x1}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) [ 683.604636][T16581] vhci_hcd: invalid port number 255 [ 683.613746][T16581] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 683.637501][T16696] vhci_hcd: invalid port number 255 [ 683.643421][T16696] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:16 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) dup3(r0, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) close(0xffffffffffffffff) 10:11:16 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:16 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 683.755633][T16780] vhci_hcd: invalid port number 255 [ 683.776634][T16780] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 683.821752][T16788] vhci_hcd: invalid port number 255 10:11:16 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_cancel(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x7fffffff, r1, &(0x7f0000000100)="23d6ef687913b8422e145c324fbba1be96a08897b94ff2e85d8766be2783a5390a3c328b96e47c999f20a2380d756584f30aebd191b0a673ea4c3cfef595c39dc7aadd0b468112bc7ba11e4c6015f61d89bfe6000c31f4dbeaa592934494e74bb5587ee261df094710669c9e2bce43d19f144a938e72ff93136cf99fb8d8cf3a389eb44e193969e1de5248d11ef72ab4c630d1af022f40ddceb30437c8b04495656da61b6c44bd2afa6b7489418c0889448265f0a49d7c42bd0d4ab26c82f4a0a2d76d95dbc9e5667ba12b0e3d8dce459d8d5bdd7979b5f5a2bf002569c394f2684d5cdb1d718c3e341518e37c40cae7d9590a0ddb", 0xf5, 0x0, 0x0, 0x1, r2}, &(0x7f0000000200)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) [ 683.846362][T16788] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 683.938979][T16989] vhci_hcd: invalid port number 255 [ 683.953235][T16989] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 683.985487][T16996] vhci_hcd: invalid port number 255 [ 683.990742][T16996] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 684.043062][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 684.048877][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:16 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0x100000213}], 0x1) 10:11:16 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:16 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:16 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x5, 0x30}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0xf}, 0x40}}, 0x95cc, 0x7, 0x6, 0x4, 0x12}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r1, 0x7d5, 0xc2, 0xeb, 0x2, 0x3ff, 0xfffffffffffffff8, 0xffffffff00000001, {r2, @in6={{0xa, 0x4e22, 0x5, @remote, 0x8000}}, 0x4, 0x3, 0x7, 0x8000, 0xdda}}, &(0x7f0000000480)=0xb0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x4000) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r4, @in={{0x2, 0x4e20, @local}}, 0xbb4, 0x9}, &(0x7f0000000200)=0x90) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000005c0)={0xebe7}, 0x1) close(0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9, 0x8000) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000500)={0xfffffffffffffffc, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000540)={0xb2ab, r5, 0x2, 0x8}) 10:11:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x5, 0x2e, 0x6, 0xfffffffffffffff8, 0x8, 0x8}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000180)=0xc) read(r0, 0x0, 0x223) [ 684.279672][T17006] vhci_hcd: invalid port number 255 [ 684.285850][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.286457][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 684.287457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.287968][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xfffffffffffffff7, 0xf4a, 0xffffffff, 0x10000, 0x5, 0x1}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") read(r0, 0x0, 0x0) [ 684.332877][T17006] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x1, 0x1d, 0x10001, 0x10001, "4b5d818f26c8cbe305387e39e11930ccb6aba490aed2f831abe29232eaedf52c"}) [ 684.374685][T17026] vhci_hcd: invalid port number 255 [ 684.394564][T17026] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:17 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x8, 0xfffffffffffffffd) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000580), 0xf8e682be2d3a23da) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000180), 0x10c, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000040)=""/176, &(0x7f0000000180)=0xb0) [ 684.522835][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 684.528653][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:17 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740000, 0x9}) listen(0xffffffffffffffff, 0x20002) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) r2 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) getresgid(&(0x7f0000001ec0)=0x0, &(0x7f0000000540), &(0x7f0000001e80)) r5 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f00000006c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) sendmmsg$unix(r0, &(0x7f0000001b80)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000040)="7e8d145cbf364587d28fd9d59d4e7a371a0a9cf95c4fbc85e11927c8a04d7f8020106c60673a238fd86f44b14e41139f5065be5a5be7bf", 0x37}, {&(0x7f0000000180)="bdf2d79a71e90b329dc02f64f1276a2b9d8b750775ccab8fd46ef77db147cb7f6fbd40ab8a6e7a512eb6d89d39ffd650b46c50d0b427d04dca42c1c109cea717c4f9fd7d3dbd981a352ce0f57350c3aa5d813670fe6f2616276f423882b5d02dede7d573a346b2d237c29c76b7de6cf5f5f43441c6870c5e9551870194ebdbc490800f16a244a2875a365f46ff5e392e19b4d8fd3bb6b7c5b8f63ad4d438295144c3c13dcf679636b4227ff5cea018ea", 0xb0}, {&(0x7f0000000240)="40503783190e542b25744ba917f728b625cbaff7ae0ffd0a5a55e4965e2f1f3de2e2a939e09b14d496c9732cad2ef4f4a6621760cae035f512ee745d08ef08e25110956ebe40149bf0e21678fb7a99f6ebc728849794191bc62190d1731e8aaedfd8212eb3ee9b3d05f2eb9bd123d0996864546e3a769ae9ef56402a11bacc98224f571ece6eb66de58109a1b03160a4263bb36a897da2c4cfca74ee0c9381f16dd37ab7994975b444cbac8401c389d8918f4e107ff6c1a349391a4c33628b96e4fe", 0xc2}, {&(0x7f0000000340)="4b2764f1ed1691bbeaed278cc8b8e62c15e5393a61d7b54a7019", 0x1a}], 0x4, &(0x7f0000000780)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r0, r1]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x80, 0x841}, {&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="48300b46fb288615cf3e5e066d1757af430fadd2828cc57a75a7c11f14a0", 0x1e}, {&(0x7f00000008c0)="33d3eaa574385a51d95a1a", 0xb}, {&(0x7f0000000900)="678a2fd6f090755979e56280a2b7c58c1929e3d989836ba324abff6a1c6356dead545a79daa66c35d8228d38904e5d3bdde5eeed3f5491059abcf0a337215379d365d024c59ef1c46746283bbedbb49805b06fd7a6430809ef7a436e97950b3006c4b8c9f976ffd5c4079014094221e0", 0x70}], 0x3}, {&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000a40)="f020a70c9bfbd55ac093943103fe631c30ce1d44b33a2e9029d03a72b5de37af8e17ca6e8d813a8ca31e08f0be7c716e02271c22107dc82b95314aa38ac1dd24b6b1bc5f483bbdb0bb30440550cec2f8ec4cc3f590cfdafb703bc173600904ba642e453a659bdfbee445ee7b41e81751374b57e3449bf5b972a96a9b67822c00493f4129e6d81ad241495abcab2aad102fa89ecbc7d2a7ed54f47e596c6ae04923ae43ff9faa133d164335ad4af58585929bf0977ecd910706fbf327a1f5a3cc75547fd8dd9595bb16548889c587797147421c3e0a46a7927599a6cc62f98f1e22825233a771b7f61683fc35db6b10c3ca50396d0ec42383d6889069a59991316053c00b43835b96904a677020b3dd620d3b470bfd89126716ab81bcbdccb74a4845b4567e1512e4db99ea92c04dc9c63a771bcd1d9f9be49b81b74ca178c34867b93adab89c37b61cfb720288cadfc60926d6005636065b50b8f27be160a0fcc4a8fe693745341ab6d3dafc666d0fc14e7274c817b810e512fb062f37f72586771f86007346dfe24054f65c11f502299b2992ad477da91aa78459d84720fdea80f913fa5a192bea86112ebcae2f20fe9253b989fbc730290c55a23c1b624c35c8a149c21a0b920c7cadbd123c417402d7a9286a7e52ceef0defaea2a168f8e1fc76190dce7f9f2077d71949842786a948065cdcb61214dca215ed1999324abd1725c914137afafba664c021b702d56f164f41ff60d489f65281ed9f91732cb1c8de5f0ca9ef4d7aad3ee73f977165bcfab71d5a99871e015f1f078227cc7ecf8af34015441c7460eb2c95c18ec2592047d0b3851b03f81f92f636275db3becfe6b03272fc2b90c7eee5e9f67a447cd1cae1edb1a366d55debf04690da9d1c9ed919e002495145b4041aebc4aca86627ad9442977d3b7175138bf7801def19b8da5789dae8052e644aeb89a9a70a18ea3744eea3ca34159c2647848ec5b3ea842cd88e1f24da86146ffbd1e32432b384801f858e5e0fc404b5e64924946842be4218d30e4298240f3967ab5acd4e7928899b41e0e0766df415f63085b36471a9578b05fb86ca502b20d8c3380e1fb7dc5908bd47e1a48200f79a8b62165bcf4ac496271e95f5909f4bdb0ab3260ae573f3e51c69525181c213540b49392690873e4debc4cc517e34845b55e3ed388f481fc4604ed967a04ae87c953b5b20f4ba7408dbf609779a896af96656da3a16cc0b2ebb30fb0f92a7726fa1a7c2318fc5177f386cc6b64ab1f6d58306dea3635715f5e6fea1e536e035bb678d3c6ff1cee1e86ffa33b4f18e70868d804bfdb622dfb158e011ef607e1c3c676a094806dd9235ad26e9fe4fcb700144eafcd47538f7a1a0a5d834c09910752a08db4ab82ba4071ff9d43df20559ac435b199792dde8d4c61a8cebb2cc939240f37acb39f9219d959bf90b61f40543b2dfb5d46304fd111401c3b7f35d80c214de9a5b547f7ea3cbd75373b1ffaeb4acc7a48b5da6f4ec00a57063e49d8ffa7eab1c1eebe1ea0cf2ebe9f272f9992d9d8f71bfcfd88d9b29a2d7e02d21497275ee1537f6a76de8d874c8d46346afa99e4d3e308f0b09b5073bca926dec0a5898f8ca06ebdeaa6a3a651f498a40e55aae381928ee897d34dad2f3e5b7a9d0fe57aad35c73ed4b550a2a1a1546210ccb7df6509590399e946d8bfe2cd48384a7adea3409cc9dd31123550ba2b64e630633e2af8619d1be80e7518cbf5c3abbb6911f8719734e51d8a4e9f71de8c4b4fc39d7b0427266c0e69e9c3446b20590502d614b33506c3572afaf1fbb50fdb71d3ce8fe93b5713d104160d00fa8873c8ad277929f5890dc8b3039dc4acc635851a639114ee0d59f033129e6187767e6f8d94130e7499fbfc7fb433e95731e053b544bfa9547757c2cedd26157e787f0cab251f4e36927649396b06c270c4df90dab840dcd134faf2a2fb9194bd45be03a0cb4a80d7a53a131d39d315a31b9c8140cbf02af7adfc3c7d48db7a10b9d94f1a4e75fa9af2dd768f8a62371193c0525e144e362a492b2aca4e492ba602f9ea206d816445004417a8a760298b53e7debfd87244ad5d7cb8f421f659e4929be04aef5143e4c3150f7ecae07d77052103ebd6fc3eb70884438d645cf2dfe1e7f1b897647a110534e2fe1d25126d5238c1dd1785e01562f1d8e52c19e80396d391e874631047048a7eb362a5f1fda18888075cf4c07d850317c31096e9ce3dcd8835a8283ca7984ddbffc0666d81dd0132954f2d8c2c4317486e2882ff16107b0462ecf16348e681312c7e7dec24bedcba3a9672557e766387994596860848c100eec45df624c91f37a01832cca4a830f8d02b04006b46f40a2d7440016f8c0b346c028deee9165ecb6b2be80299ba5ca328115a72e823cc8010acf87509363af7a14f77cd909117a8a206cb8f5010fd83cf04408a54f59b949b555087084bf9716e3c88e1029804206f46268efde2f846d3cc71e02c8c9652ac9df93bf81415167e990cc36d9bbde4e63f05b154f0beafd11d90cd7dbaee7bbbbdfff26aa5aca390805822b9f294141e45d6355cf9c736c0037cd4ad62fc88e3dc3e9bb5a96ce19a0fce8bf562a28d6662826576097d9125a0ac5f6303a6b7b5c314d19deae21408a9f25292efaa3243502437fee1924ed2e2c62cca6cc79547398f6864a88779d1a3c077ee7c3f169b270a434c4dcdeb747fd94c037ec9524a4e89ba431307ce9cf32978aa674363be516da7434fdfb0792bbbd25640e91d988141667b08b6f7d8475f81056e7d05eb277f7939e8c705afe21c48f28b93baa4439b88d50e14ae5f1995283f9f18b8de6e7af392a4dd4a3d5e67809efed471794ab03748d722028559b71cd2f9f315ed1ec51acfc876633acccf270c88b678233f6abbb44edadf0d5281e5cdc1c287232bd77b4642845c8c12d4f57036ab8836149fbac7f8da022621475197b2726b43c449a5a0e6ad58b8963e858489b62ff1b36552575e0b26388a2acd5497f694c4ead58223d6accf3b9e9a17b584c89f6e5d4827ced2837ac335f31d3144db8af7fd2b8d09fd209ed6d6744dfcf19402372210d87119c60383acbc70d4414ab922b0bc0b9754559d0dba8f45cbc1bfa19c415073c7be5432ad7a9f04c8e772159c167d761547c2e19e5a9cddf768e6065b81ad87b1faf9b5ca0de8411211b343d2d70040210606f4c95329f06f2399363d2e7fda8fadd9495cbb3d50a6edca3fad614d59e1958a4a13efccaf40af7a13c2e583de410ab017b2a29a6fc82431688efebebaccb1d2a9d35ddcd6db69666dec73a2efc74fc3e29904f3d79d84671ade6ca39dadb03fadde980173ee2e152ef94d0041c9b60d2bf1c5599c11426e9c6f0774ba4305fddc43c957a8784303b242c4dd3037c07a4d4f83b1540a5998e6d5348295219619538e300aa0802dcdbf572698e12676eeca9ea55279b09f7efa74b99786d1eeaafbb43ffc1f848af9007c378249f679786e46f01d12357603f2f1b0895f655a0d272563975961907cc94f1b7ee21eacc1a4956ec28b4a368f712d65c4e9c58fe66e35a349ebcfdb740d825c91536328d493e7f2cbc467a28757979ac5c32a5f5e5265088d93918ffb52c0fec7b862a89d52816370d20dbdb5653b325ebdb718106009cefb8ceb6beed5ac2a7783c8e16021b378860c75f42234cc57774584a499f140f09582d661f5d0559ea3ec74cfb2c50795b4e46dd133f23dce57c00a302937f8c0fc6624c7ca81cbc9b329092dd50b2ed5bf156a4ada26de2a402382bc1cf6501489318ab5d1defb74ff5a9e0b983f84d5919262f2991183a0dc49d7d3cfa760cd2ad6f366cf70bdda1beee4dd14d385df0d50b78b1fcdfb51c9a610a348a3fce107d2970e05625039e84821f8c4c06d2880d89e4d1b64c67a9888df4f3b987b19acbf7cee38b6a33e3e46039b836a1ae2242e3d0a9496be3e6838a7b8c5d25e6738978617442398e81e9d717e91fbcd041d567b13a587793e64ed00258a3bbd2e31683af3b400e6d8ba10b8b0cdea6df2101daeaeafb1bcbc6a9899dfd63984dd68e5200f2a5f534c31f6e36dede6bc8e413c7090a1a34192e89571ff19d6a4c4450593e7f4f6d7b19ca8daca57dbea8320b48a563049708a848feaebc7b8690bbc9a8ec0a8b69a811a177356aea60b43fc16b5e1c0b03baf12ad0acdb976d796497fb07811825e83f2a5ffd4ffc16cba693c2962033e7822945ee4e2a968acdd778593bb3d6292d891f1769ae08827be35122c3fe4eaa6d2df19ee3b4c52f067c911066c0c629b5f6bcf0fce09ca3dcd836d5efbe8ad703ac50024be8747aa0701b8a9361b00ce30885eb210170cc27b897e0d8a1a45d4223773e78e95b76f646d7ee6e7ecf4a2e8107389c1ca1f9a7fb98baeca74e166bbc28fa09f2ef38db7eddff912ac220e5e1fcdb16e73ce2c50a1d097b766c1ea290f5c4631b052ff3a11e2cc6bf36292095b4b3e0f51ab3a159652b3494d2039367f53c0eb2a61aae6101c20693bec63e81e5d614b1d8b30ef18228ea0f5751e11c6aebc0d47efa6a0d6d288bbc2264eef8b876ccd92b10c8c7ab750f47a5f40b653fce6290ce88259209df3e3e3def82b5bad8cc9fdd83e6bf2d1c06de21b9cd2fc14bd839130acb0efcfc80e1ee05fa62d6d15766ac128820a3c039f7d801377993392df656a9758a486d42e6ca6878c19a9ed49920d16a757b933c8f4066297e6a901fab403fdda4e107c02fc6a8fcc7a696cbc4ef2eff03d0bbbf25ca36f4b70ffb2b56a3539473f3679e781182f94f1c61b340939e5a1e61ada8da96a607686b7768740d23554e827e7dbdb0fb9f8b680cae83d7d670c909d0661f36ca0f6e65b60c84b0ed97b8dd146774a2408f34738048ec59853baf3bebac02ae898de80b82d4774a26899d44831b8f058c15008aa0ca9e3f46df7dd47633a5f03b927750d768694377541921e9f45fb5200ed5f2ec73e04f77bb31daae4343d64597cab4689548256d3eaf671a279248c9cb6fa7f6b5c39ac84a8d795b198be5a8f6243383acefd32677201cab42521cc14062d99089290c224f084cdf8d75ce4d91beb0e8c86b24eda8e2cfb74713b96eef4895d33e282ebc232ec7a5060ed934d6ed65894b90f4f6ab9013367b864f7f2db0a70bdcc7fa7f2cca48e326294f152e4952684927ba340f75a9f50f59e77aaf8d538d79d84034dbec2f5b20221bf21f17cae0f609f9ce1c47b7784e3569654b17a602d2ad7d57e93073c9bcb68a0dfcb72f7d723825350418aecd166f23936b89c3226a105a0f30a7a6c0f987ada81c0ac5edbccfcd33e8fea99b366acf11d1472a30cc831de5d1b944557dc66348880311019e1afafdd8bcf3e141010a14c77ca1c91a6dfb345fc1d7512a7fe429e5355a67cb33be04d6b7b505183bf0d3a1ae9b005cd7ff9cee22952bf2e747272780303b2158b232b458e88b1dca6451024b967c87a6ef0aadd6ffd69668cd879db1936e0d5233f9ca1f2a4886f414d397acbfbdeff8a37d164e504c2e548887f9c0ead40133706f0974378acaf091c8d7c9e7260169f824aa8b09e58550bf10f9191d7239ba181ed8bdf4ef8be6ca18b9c5ad95a4e638f8d1ec03779d186c5d1c5a13d159760111cbdc971142ce38835c1918e2bd06d77f5366c657a8ad162afbd6012b967733af5eb325247ea9824d348417737094a63efdf1ce0fba6d34df7f37fd36b57d71b59eaeceacca1f06f27dfb835aeef89f36ac14a7a0e3f0", 0x1000}, {&(0x7f0000001a40)="d2ff7541649485d1a344f2e1300bf92970d625060b7a9d81ab2ee9aa0877834af186046aa04f54b50f0b898ba80855fd1a6ca41b70cf6d648f072bcef310fc1bb7b42cc4ad142eb914f02668df3298f644a84932a71b7d86447a43d46b9d0af7ca306bacc31e1b9d32f9939e4a16c8e9d25174fd0e56c0785653c500983d228687b1b0922557a107794350f93ebeaf598eed5c9b67763b4ca062fafe641aa0061e4ef92699dce389e4227ffeed98990ec365f09953f52ddc14c0bd3a91e367cdae816209783ae6f5fc5bd6b18f27c5b74f647a04d7ab0f9c8d0f4546999ba164fe650e7d6a62c286b4691c4524d27ff72539d0e432d55ae511788a62", 0xfc}], 0x2, 0x0, 0x0, 0x8000}], 0x3, 0x800) r8 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) write$binfmt_elf32(r0, &(0x7f0000001f00)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x100, 0x6, 0x6, 0x40, 0x2, 0x6, 0x400, 0x107, 0x38, 0x355, 0xfffffffffffffff9, 0x6, 0x20, 0x2, 0x0, 0x2, 0x6}, [{0x7, 0xe144, 0x1, 0x4630, 0xffffffff, 0x80000001, 0x8, 0x7fff}, {0x70000002, 0x8, 0x401, 0x1, 0x0, 0x93, 0xda6, 0x1}], "f78e2d9d6425f49bf647892f4096352e9200151b49bce994823b7057b5be2ae39c1da59a208db065a16005f72149c9e76ab0e919692cb8b8ec5fbca008362fa1ca4ce885d5babc558c1d307c7e3187010fe5b3262b6dd09bea4f5f64ab6d967579cb3b55f5da9e22ebede043e26668a824a3a45eb54fdb1ee520f9afcc30", [[]]}, 0x1f6) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c80)='TIPCv2\x00') ioctl$CAPI_GET_MANUFACTURER(r8, 0xc0044306, &(0x7f0000000500)=0xfffffffffffffffa) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001e00)={&(0x7f0000001c40), 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xc8, r9, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffb4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffb}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) accept(r0, 0x0, 0x0) close(0xffffffffffffffff) 10:11:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) 10:11:17 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:17 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5428, &(0x7f00000001c0)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="8552460504b0ec1ea2697f69aea7cbbd", 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x68b36a1f}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r1, 0xc676}, &(0x7f00000002c0)=0x8) 10:11:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) read(r0, 0x0, 0x223) 10:11:17 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(r0, 0x2011000000004) write(r0, &(0x7f0000000000)="895d98f1bd878026a40650bfb9998f09a553223548670983d65b8a1a05d3fc1d30029b769d900959bdae91c6a0e3b95ca8f3712a7a71fed623", 0x39) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0xffff, 0x3, 'client1\x00', 0xffffffff80000000, "0dd88513937f72c0", "4446fe0a6aba896d79dac278f0e389c9dea07a8084d205c1052d0d4d7cb3204c", 0x47, 0x401}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) setuid(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="95f2b1a5ec6cc759bdc91935971c899726ce08536c42eefe94007e95a6fc9dc27af8c29fbd7d07380ec6bfdc2d4407adf27e0d769804b8455f0af86dee913821686af9b23b05321c85c8e24ed6f206afe237d3559b455b6b610acd3e9da0bd219203ef8113f112db5bc7fec100e7c233238761f22c68e8ca9a9034219ab5207f5f75b140eea3128c9dcd82da65a06158258869b7b296e283c7a238627186a84786b7b09969820d5182aa97a17d2749cf65cd386461064fe29d2da65fd46a173f053bb86218d35c059c6efe0451029dd85f12a539c81133fa000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x800, @empty, 0x6}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x4102}, 0x8) read(r0, 0x0, 0x2f) fchdir(r1) 10:11:17 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:17 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 685.212221][T17469] vhci_hcd: invalid port number 255 10:11:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x0, 0x6, 0x6}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) 10:11:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r1, 0x228, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x90000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x161}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x608102a3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") umount2(&(0x7f0000000000)='./file0\x00', 0x9) read(r0, 0x0, 0x223) openat(r0, &(0x7f0000000140)='./file0\x00', 0x404100, 0x130) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 685.258286][T17469] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 685.328056][T17482] vhci_hcd: invalid port number 255 10:11:18 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x10001, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "95"}, 0x2, 0x2) getpeername$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10) [ 685.366792][T17482] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:18 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:18 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:18 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x12c, r1, 0x124, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3410}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff56fc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x20004801) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x2, 0x3, [], &(0x7f0000000080)={0x9f0bff, 0xb89c, [], @string=&(0x7f0000000040)=0x18000000}}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x0, [], [{0x7, 0x1, 0x4, 0x6, 0x5, 0xf661}, {0x8, 0xffffffffa361002f, 0x8ad7, 0x6, 0x8}], [[], [], [], [], []]}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000000)={{0x0, 0x5, 0x1000, 0x10001, 0x2f2, 0x1000}, 0x4}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x2, 0x400, &(0x7f0000000180)=0x7}) 10:11:18 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/212, 0xd4}], 0x5) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:18 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000240)={0x20000, 0x0, [0x6, 0x0, 0x6, 0x3, 0x7, 0x6, 0x8, 0x7]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000002c0)="adc6df2c66ebb3b90d187a8e37f8007f4ef3fc85b9c5c9c64a22ddb16a5fa5894ba61f9ca93cb4365382e828a6f8325c0e21f09b4c1dc2885f4512d5bab4cbbc91ced10e59129579dd22c4f42ed60552a01c1e949cbd0c221dc4bc31a993e05bb74ce0754e468b9f5703c0a45c60784daa3bd066b0b10cb12927fb2f8a3d7bb3b32cc473a87a6bc4c65c58fbb231856683b55e0799faae9493e69b00c74ebfdaa9286517fad883ebb7af7c65b9f39f70e87cc3da8d6b0018f75da372fa732453f5392412cf7cf5d4fec7cf834bf48ed284fffaabae7959e64ac30330c81dfb18597c3a073476", 0xe6, 0x0) keyctl$revoke(0x3, r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x40, 0x0, 0x7f, 0x2, 0x100000000}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, 0x0, 0x223) 10:11:18 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:18 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 686.162204][T17934] vhci_hcd: invalid port number 255 10:11:18 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/26, &(0x7f0000000080)=0x1a) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, 0x0, 0xc) 10:11:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) [ 686.212719][T17934] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:18 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:18 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:19 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(r0, 0x0, 0x0) close(0xffffffffffffffff) 10:11:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) get_thread_area(&(0x7f0000000180)={0x7, 0x0, 0x1000, 0xfffffffffffffffa, 0x4, 0x1, 0xfffffffffffff42a, 0x1f, 0x5, 0x3}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@initdev, @empty, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'caif0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000001900)={@initdev, 0x0}, &(0x7f0000001940)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000019c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000001a00)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x804080}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x14c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x70, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0xffffffffffffffff, 0x48, 0x0, 0xffffffff}, {0x8, 0x6, 0x1, 0x8001}, {0x2, 0xffff, 0x200, 0x4}, {0xfffffffffffffffa, 0x1ff, 0x16eeece0, 0x1b}, {0x9504, 0x7, 0xd2d, 0x5a}, {0x4, 0x8, 0x4, 0x10000}, {0xfffffffffffffffb, 0x8, 0x100000001, 0xabec965}]}}}]}}, {{0x8, 0x1, r4}, {0xb8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000005}, 0x80) read(r0, 0x0, 0x223) [ 686.469314][T18170] vhci_hcd: invalid port number 255 [ 686.483143][T18170] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 686.532202][T18310] vhci_hcd: invalid port number 255 10:11:19 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 686.553478][T18310] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:19 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) tee(r0, r0, 0x401, 0xc) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000600)={&(0x7f0000fff000/0x1000)=nil, 0x1f, 0x3, 0x2, &(0x7f0000fff000/0x1000)=nil, 0x2}) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)=[&(0x7f00000001c0)='!vboxnet1system.^\x00', &(0x7f0000000240)='/dev/dsp#\x00', &(0x7f0000000280)='/dev/dsp#\x00', &(0x7f00000002c0)=']ppp0securityselinuxem1+em0.@\'cpusetem0-:GPLwlan0}cpusetposix_acl_access+cpusetppp0mime_type-]mime_type{/\x00', &(0x7f0000000340)=':.\x00', &(0x7f0000000380)=']\x00', &(0x7f00000003c0)='/dev/dsp#\x00', &(0x7f0000000400)='&}\\proc)-\x00'], &(0x7f00000005c0)=[&(0x7f0000000480)='/dev/dsp#\x00', &(0x7f00000004c0)='wlan0-\xb3\x00', &(0x7f0000000500)='/dev/dsp#\x00', &(0x7f0000000540)='/dev/dsp#\x00', &(0x7f0000000580)='cpuset-wlan1@{{\x00']) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0xffffffffffffce8) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 10:11:19 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:19 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) r1 = accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x28}, 0x100, 0x1, 0xff, 0x4, 0x6, 0x9}, &(0x7f0000000040)=0x20) 10:11:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:19 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 687.078029][T18469] vhci_hcd: invalid port number 255 [ 687.099394][T18469] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 687.147397][T18478] vhci_hcd: invalid port number 255 10:11:19 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='rose0\x00') 10:11:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0xe2b1a6ed762a94f8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x0, 0x0) tee(r0, r0, 0x100000001, 0x1) r2 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='/dev/usbmon#\x00', 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='$mime_type\x00', 0xfffffffffffffff9) r4 = request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='/dev/usbmon#\x00', 0xfffffffffffffffd) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000540)={0x3f, 0x1}) userfaultfd(0x80800) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r2, r3, r4}, &(0x7f0000000300)=""/254, 0xfe, &(0x7f00000004c0)={&(0x7f0000000400)={'wp256-generic\x00'}, &(0x7f0000000440)="125da96eaed7d4ccf27e55648abc7df848a12da963e946381ba1b159fb174ffc4a754e28f944fd037a86b3712015cb7ef79322455b346311ec40d57d99167f62af33470b9148bf795f1b", 0x4a}) [ 687.170166][T18478] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:19 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(r1, &(0x7f0000000000)="cc0541a76f45fd9ef35b9615750af087b905d9d23eafc332b86fda1b4dac783aeebb4286b840b147307d85fdf10db4df531b6fe4703a853ed49c6d2b288d53710c1bd1cdee989acc063a3cc309a96c09fb2f", 0xfffffffffffffeed) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:19 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:19 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 687.429167][T18702] vhci_hcd: invalid port number 255 10:11:20 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x5, [0x7fffffff, 0x9, 0x1, 0x5, 0x800]}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123fffffb070") read(r0, 0x0, 0x2f) [ 687.463521][T18702] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 687.548329][T18795] vhci_hcd: invalid port number 255 [ 687.574859][T18795] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:20 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x2) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0xfffffffffffffff7, 0x4, 0x5, 0x7, 0x9}) socket$inet6(0xa, 0x80007, 0x3) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:20 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f3188b07048432785585ce2e537c58120d0f357fb0dd65c6efb51e9c21ad5cda5e8940bf12ac61ac709551e6ac947575af604408bd8d603e747e69afbf086726d43ddde676e2ded12937a0d5dbf4936dc6dd038ac96ed80352f07d64021fb17a69497129814e0088d505adc529ad01a6494dbae77d843aee97f6038097462108b0ddab347404c22b47453f8a367e8247a0882fa9c1ff4fe4c8d926f24537023052beb3740488cafb61d3f7d81a77eab036232ffb7c7afe1f651592ae4e4a02eaadd30e72f2420") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) read(r0, 0x0, 0x1f9) ioctl$RTC_WIE_OFF(r0, 0x7010) 10:11:20 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:20 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000280)=0x2) ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x800) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'rose0\x00', 0x5}) 10:11:20 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) 10:11:20 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 687.997517][T18930] vhci_hcd: invalid port number 255 10:11:20 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) write$vhci(r0, &(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001400)={0x0}, &(0x7f0000001440)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001480)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000001580)=0xe8) fstat(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001640)=0x0) getresuid(&(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0, 0x0}, &(0x7f0000001780)=0xc) sendmsg$unix(r0, &(0x7f0000001880)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000280)="0ff41b3c00ad24ee0546bb7ba82b114e1b453fef38497d0f8717c11c1bb3c51a55c5c135ea6befd25feeb6c760767e46be2b9b8ed181412f52ef0b924d1701a4954095ab64a41257ccaa3ad7671549f5fad57a3309d3e39a601ea54cc9d8d50d5f1cb193365b76b8cd5457f8cf2fb6de265643b2ac95519f552aea90c6633f25069eba69f5652f1c028b0be25ed954c53accdfcffd12628be37f235ad5a3c105c9747bd71b5ae2653a1eba2977665afeb17a60e34a8f9fe51d9fc0c76a8e85e63a5b645f8a671759a22d119622b5e815795b30d4edd98d6f56af0b69dc31c259407218535c0208f307b9e81ccd0a12f61c597566dc7f2048dad183e3cbf322e40ebb7ab1e480672a28980658daafb468bffdba8a8c9b6fcf232010ff6739404c6d3e24fca8f82757c9712a031d10da953744d35b35c93362cebdd323bbb515819e53015482c4b8832cbd9dc4b09bdf6f0920a7d94d4558d668b0b2e7c16c612966b0a862aac9785d2ed6da83a7cbee9593dca503aeadb5c7ff96b07c74781582660eeefce1a8ed0670af8f7bb51f6bdb590b6e4703f9c432b0a31cae973f9ee67ebfe1f13d3c7afe33ee77b125082ae512132dada66ff00c82a53a3057ac44b2846dd3ae7272be568427a1fef9f079e9fe09bfea9ac016c01bf872b67697cd3bcf8fcdaa9a7c73d2abc781ec04e4deeed0ada9499938ec6b2470c2cadd0d1a69a18d046d751de3d5738d3044d3a82d21179f53211c0fcdce2c854441afb00b60bd8ada010bcd480cd6203a9d433b8b89aa13c2f5e6c9a0cfcb148e5ddfd22681c5cbe620e4d7ba8974989d92f54f6a0da97f528fbf0e9a738ccb60aeef5592ef64255ca88672335e1c242b5b13d3bb7c6ea6a0e0ac28d90075f0f3f6366ce5445b55128f6e9d7f14b6b65e10f3f3bed3ae019dbf7e23d83ff67c42dc93b6c3011ceeb6d2eb155091dcea7a83c3e03499bbf8f3eac420d7da1dd93a408afa168902c3a664091c27be61d99e09600d8a6a09c8207f44c31214816fb8686138157f87b972b54fcadd184c27dad190cb5c0808af5ecbbcfd075751ce215690c5e9a7634b84c5a47b9e278adf9a3a30370bcce401704ffc1402007533549ad3598e687c7cfede89346970fb3d1b67f697c684bbee5fc7da993c9fbbe28a17ce0694cbfbc3671ff8eebca888b3315b67f1c943da3a31c2a0051f955af87c6885173379c92330370f2639c30b92243a5ea3bd51ed1eafe943f542577e2c239394531f28ba93a348d9d37fa2719ff3100711021d892eb04758a2004ed189d919c508745d26af55208437a605fc9440f2787226cd21c4c8041744ebb8428fd23cef24099b4a635a9db43d7e05b1f85ce10c7990a966a7c75411bee42754115613827590f179f8c4022831ca82c310ea6d87cd146f8bf60075ae14fc8dbc68d571102eb1dac8e9a09c0837fc3b45c980475ebbaafbbb90f92b34948820cdc410f1e674ea903ab8b0e3c2ba6b872817324d8a4c428d713c67989f9ff584696df492fec4d396138898f9444e6ce8663cce8efbadf56479a50d0058e45ae0184a7e0e69825b6ad0dfa7a6e084db92228a3c5011b3384a191c444d46dcf4654850d3d4eb69037adbc71fbbb68c011878b9c967ce1fddca3c7d8889117aa24ab700fcd3e32e92c7e86f4f951f132b74e66f1cce6830151ddc783f152e1eaa32d15d432f470a628af37e6d4e764ba207dc6deae510aaa17842ea4406c58d3ef3f6a4ee934ef2bdecff793636f290d39addb322490640483ef216b842250071c1fe06ed7d244bce305e41c8ec8bfea6d97837eb985245c86cd3bbd464bddf1119147f0a0b417445acbf62f402475b53e9fa6bce70ff71dff3585a37f5a7d4ceecf6e07f9386a0ccca46e3f2b6637cb841ab443e845d5acddc45725454f74ba6bdb688925f54e45459b0fd6ab17cf60ce4c0b385ae46744e406c412ea4bbe38450c677250faa9f1bb5c717fbce81b04df0a364b7ca6cb2eebf683b8efa54f32cbdfb02d0986e63ebd88ea39d8078ce222afee85c63c5ac716c021a32f09b3ea8866c63d8a2e59caade400cb04e3b67e2b6c5f598a2d3055b4fa9a267b043b9a2213400017e392fd35c0be5331dda4530b092e9b5f6a45010461bb0c08fd9f2dfa424b6cde7517a9e6fee48363c7acb066d563ff965f04b18f0f52646e03077b7e8694a73dbbd5be112d02e5988a23be5c31171611684d21eab5386b706c12c82a8fb517f50e58f6258ec1d5c6027715792fde14e06619a0f57c04759a0cb600a75a981b64fb30e3596c5e60f5c8bf386eb8737cff11bfedf10e9aa289e460517d9a8d0a46b22300589f81d24f05f266aad68f9c5af5cec2d8cf22eb09a6e7634b65e97f6b68f404802480135d249c0db92f9ca91cb4663c8647e9ba3f565d2af3a757cf6c6e62017414ba9c1127476d1cb11a8b3e9551ee7c3fb855af62b30cc2b0699ca830bd77f3716c85e1e3d45d11bdafe67cf9d16fa0fd9946e45987c8fe7b18ebd98243717f8b66a45e0a20466c6144184361867987ae72d5d645b24fed7cb9a6f416f53d50b6f6275bd2bd37f9456532f83855ed323fc15351f16e02edb670005af0942be1d248abda99694c7605b1d9a85912ecd556fa460816198335599ea5f735130cb6d998934e49f713a83ac951908957b7b0852994bcd3c9d0c9a6b9142116660ab9f72dead70fa99ee12457641a4dd01245de33012cbc52e13618de78c4b4f28b77470e4e5131726b7e0fa9d1b53115d1c8e749c552c1eef7e921a8c29e5af9bbd7862e84c1feb71b66fedfa2a3d3b356183837a4e7cf5f9c7984236b85d8970d4aedaf654dba67821708fbe633635fa96e872a5c3b2126902cc1daa97d53289ef88b27714e713baa68dd00df2824495a31913e85be11f4b8bd329ece36ad3c346d886977b99cc3ddac4cc633c4246cba27faed613b976cef4b39457d168b359bade082f330f644690c0c51cf6a9ff1988dacee519969b7639eb172905ec002f9dbb9da5e0da4d67068a9592504fbe6a20c194e069645b5759a3cd1f70d663768d4b37ac22ed0821601e0ccca7c6e3840bff2629e56e9d7d41ea63c4c727333f5a107a3f903a3d1cc11042dbeeeee65f8078bbca85b074229b6162b0edce6246f3e17584f9e11fa4da05caea7d44e48faba7238b869324034b5f4092664d6e40be59a0a76bada360a62f9107e5144ab6fdc6dd8b91c252db2f80078674f3767efcdeeaa7780d73edfbfc96af76dd39fbed6d23556c7ab9c2f51c0ac7d3d8a25bd6efc3d5facf58f0169c7cdcd63888ba87415ee18ea6c99969e05d96e64819c502b9480cf550fe48e9ceb2fc276f7fae6894727774cb8bf42e414f82b41ae017123f4513c6bc9b013c4d2c9b5f1d5398a985e8fa0a3bfe4c3ed12504d3c0a294768f23099d9538dbecaff6fda3f635369989606ccc38ce37fdc81e117bb008a2a23089e3d27c0364dd9d07fd4a58550194c9b5dac1f2d271725afba14e3f1eb2cd1a01f0ae2521aea547f67bb8824add4f467bc051357e2b3f46970cfbe4a58f2f1d85d1fb812d131590d58236434f939da18ab37330dcb6c133171e52353d022b6eabc29ea8e80abc2a1e23da8650920d717b3fd397fcf2801688c0952578f6735055707558eb7032e31635040e0e04df596a1251f0c9208958d2343a5fa95c696238b2bd351feb09f99fc1cd1c42b0ae755f0bbf07b90115077949d15af86e361a0b875e87853282fe4f4104f9af84312527a0f5e50726d5653a100632e19a71301d6494d779d8100b346246198b4513246636c214642c8e8106c866574fef15a2b9937b307e5ef8c3e414ba7bc9917d7016a3796df23c50f4c60ce94a87f3bc326f95b40f59d9fb08ec4bf10caa3e7361fa6b540a7c7b51726767521cf8d72887f29dad5a57de494b123ed3df68b18e55466b3f98fe6efd79559ca96a83aaa418e11bedb14d9dc7040f050c3994be7ae738317212ca846b1eda0bf23ccd447482f57520f23bd7f84a01060579b5249d97dbdc049a5c37cf72767d82724fcc5d7f01d5c0f55170501a5fb8488516a72346edc9750f114e6b117f14b4439b3f8e981cd81832f4b5fdacb7ef270b55e6db5a707801184a7b4f8cc5231aa7558674f5fa22704dd51ec3514210498fed68dbcf11ac0a5d70e2b96ea21baa60df8dff5b305b87c15c4efb407d2d38e505b88487192e5e0725aca04745992e9b93dbd1c284dc60146f2e8a7d90262a3de23179a52d7ad1b35b98aa210cc00b94a120ce966b98018de5692b48700b5e8752926189f3bed67b9155a6675c8eefdc820be1183819e743fddb0c05769ff5ff6b187359f3a20dc022c0f7c2a55d452aeb61d87cd7e75694c16fcc629a938d3c191d8af04247ab9f1e7b1d8f57fdeaaa09e4412368d75d31ae71c8a4f4acc0d205ec6ee83375069cac13a36739b2ed86874215cf088c715d1ace7889345a9a05d6a8b00ad8f06f152575cc866c4c159f01c93730cae6d0ed887c5e66c1ca3228ac34e0df074c13396d5f7695857c70f2ec56cb1482cee2294979dc582f6f38ed108e035f67ef6241c27255748a4f8731533bd38f0e77b6e43aa7abf0894a93de20c401f86279c1673b4494c48d96580bd753619609c1514b8b6ca3df8353d996dab44434cd2dad65b974ea3111d662ae7768341a1d6fef54da8a188b7c170ab96eff7cf8bbb287d97f4dcfd21160ea7cf3274ae3eea7b267991ec8e40d976aef695ec3d3e72cf1d30f12e234caedb0861442a47c8df0a1027d68c730ce2bdd535b9839888ea8705ba0aceb1d419e17437ca9054f032026543a7317b36c46ec824401294d007a9e3ce286ed5395269668494b2aa67ff9e3abed1dc0ce8d72c5cac49f60120dcf812c2457efd4e3443c81f50ab4e2b4c74264a9bd7ad64ece02879a109cb8ddf7def477b48a5b6de4b3d32d9f271f37802257f7c01e0c64b15add172f9544081090005f89347013a4f2e86495bafc1bd2c79786fe96d6d4d6264574b3237343141fc12e45da45fa2eb3b824d910759055ef0ab3b4b5685f49bc6766fcef4d497c7614017bd15e25abb39d9540c101d51bc7f60809ca60f83b9eccad6ccd785dc05b0dff443fd4a4182b0b0f37f52e6ce8b9d73c3a5b533f2875031875cb973b646c335824d024bebe085f5f3db072a275eb6d36acb162bd369d825cef03f8f210e049153135bd11b170d7e41d7e0034560f60acafe987e62263b085d43b6ded2a9801260aad18cb781dcfaf05c2c9e96a002f9eecfce481a316426e63f2e757bb64ee774d24b3893c5589c9afdfa4444f55f9c2f03ebfb508e9897bdda9ff10a79547cdc4468b5979515ca64e60602ad9fe187dbeeff63a45cc9e1d4574c1482e0c34f7fc941b5345c9129c3fc8a642253d683b0a9e0ab5321bc34727397765f296b17c09293fb7e77a10a2398cfec5ff60b0bcac6b5ba9b889d4629738247a9783023b9ccd58f7514776200f02d639ae0ce679a323c2277eaf05c0546cc35c194e724b276c6c29a1d6ec6b4c90e8062ab846bd70b04c3bc977775fdc366b24294f6bba067fc2c3a7b390aaa7d2f2a0a4777a67dd1643547ba1da36a7f0652d26291f738fe3b37497a977f22950c95d8f2d1669ed3b7b43a8cc7967e98e507159c6a0db8a0a3e8298e792ec73b3f5087e0f9e618f0191f975be998bf3fddf1fe38c387faf43d3e64c7033d5a68429f8f35282658d92d4fd1f4415fb06616d2fab06226f6d92d23a77c7c2a9d12729", 0x1000}, {&(0x7f0000001280)="b6f271d3e2ea55cc642238f8a59d2119b51dc6660bee680648636e4771f7874a8e719a168ef112c4923f387e940f5500c039f01d7fff9ca1ee6a1c9354f6422f0901d172a22f1d97bc2a438346eb59703a2b54e81ef1db37d4dfd0c9fc184b240127018fccb6e6083de95a9ad9647d3fbac28fcfd5f7ef660db721dd0b87ec1f5774856778fe617461fc771f2fb2fbb277bea7", 0x93}, {&(0x7f0000001340)="8087b0122cd55d4ee6fe665acee222dcea9ac1edbec18c2dc9c3853a3912fa394c082cb7175b30c65dc7fd4d8decc874201a4482f06ca606e8c724d0974c12436a4da2b609f332352f4338e768372af649fcf5071014715391f4798d", 0x5c}], 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="01e4fffffffff8ff000000000100fb18482eefaffda028514047b431f6ebe22c", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x1}, 0x44800) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x3, 0xfffffffffffffff7, 0x3, 0xa, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bba, 0x4, {0x6, 0x33, 0x5, 0x1, 0x0, 0x9, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2}}]}, 0x27}}, 0x40) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x0, 0x1}, 0x10) prctl$PR_SET_FPEMU(0xa, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, 0x0, 0x0) 10:11:20 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0xfffffffffffffffe) ioctl(r0, 0x7, &(0x7f0000000100)="0adc01013c123f80c5b070") read(r0, 0x0, 0x223) [ 688.030593][T18930] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:20 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:20 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 688.195324][T18992] vhci_hcd: invalid port number 255 10:11:20 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2f, 'rdma'}, {0x2d, 'rdma'}]}, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000140)) read(r1, 0x0, 0x2f) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 688.218137][T18992] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:20 executing program 2: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x4) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:21 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:21 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$poke(0x5, r1, &(0x7f0000000100), 0x2) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x80000001, 0x1, 0xff, 0xfffffffffffffff8}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:21 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xc5, 0xc34, 0x0, 0x0, 0xe, 0x4, "2f6b68830cc728aa36664a6b0f35a4e48d238e4c576971420dc9547330ddea10fb21d08c8ee4905b08686616b96997da78d81cb55c526cf49787e785dedf71aa", "565502ec43893fb6393d6f3a22df315979c436e4f50968b5d98567eb85acea1430702fe537443c9ad215ef2c66e50d7b610201d8f44639b24ef90e8003ff5bb5", "19ce7b087e9b9e814b1d93f2f2ccf0bf60a8560c45f5a0d210c5c07d3d29bf7b", [0x8000, 0x2]}) ioctl(r1, 0x4, &(0x7f0000000080)="0adc1f123c123f3188b070") setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x480000, 0x0) read(r0, 0x0, 0x2f) [ 688.442822][ C0] net_ratelimit: 14 callbacks suppressed [ 688.442830][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 688.454338][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 688.460169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 688.465977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 688.564518][T19377] vhci_hcd: invalid port number 255 [ 688.582214][T19377] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 688.619548][T19414] vhci_hcd: invalid port number 255 [ 688.636645][T19414] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 688.682842][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 688.688659][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:21 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x244) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000180)) 10:11:21 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:21 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x909000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 10:11:21 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:21 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mprotect(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000001100)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r1, 0xffffffffffff0300, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x6, 0x101, 0x5, {0x1f, 0x7f, 0xfffffffffffffc00, 0xa73}}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:21 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0xff, 0x4) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(r0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) [ 689.090498][T19618] vhci_hcd: invalid port number 255 10:11:21 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x12280) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x603, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) 10:11:21 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 689.131036][T19618] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:21 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:21 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f31c8b070") read(r0, 0x0, 0x223) 10:11:21 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 689.276435][T19699] vhci_hcd: invalid port number 255 [ 689.308625][T19699] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:22 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xc7a2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0008002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000026bd7000ffdbdf250c0000002000020004060400"], 0x1c}}, 0x41) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) bind$rds(r0, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) [ 689.538486][T19887] vhci_hcd: invalid port number 255 [ 689.562832][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 689.568727][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 689.581870][T19887] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 689.650372][T19923] vhci_hcd: invalid port number 255 [ 689.668475][T19923] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:22 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r0, 0x10}, {r0, 0x1000}, {r0, 0x10}, {r0, 0x100}, {r0, 0x4004}, {r0, 0x1000}, {r0, 0x2}], 0x7, &(0x7f0000000280)={r1, r2+30000000}, &(0x7f00000002c0)={0x1}, 0x8) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000180)=[{r0, 0xfffffffffffffffe}], 0x0, 0x0, 0x0, 0x1c1) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) getsockname$netlink(r0, &(0x7f0000000300), &(0x7f0000000340)=0xc) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0x3ff, 0x1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000240)={0x1}, 0x1) 10:11:22 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000040)={0x80, 0x3, 0x1d, "6fc1b6b0ab6d606f2b55a99bed4c45fdcc1dc7867af9774e38efb933ea67ed9feb94ca5247a68b8dba7923ca150df51c444c89a5d0cda5ca37e39e9c", 0x25, "986cb2ae1d0b9e9d4b66d73349f3d2d21d1c36833284cae6475af411d0cf55326c8d100ad8e2e2b9bcc32ada0b75f166d5823547510fa79bed6e6b62"}) read(r0, 0x0, 0x2f) geteuid() 10:11:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 10:11:22 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:22 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:22 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x24, 0x6, 0x1000}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2, 0xffffffffffffff51}, 0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) r3 = accept(0xffffffffffffffff, 0x0, 0x0) fchmod(r1, 0x8) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0xa11, &(0x7f0000000180)=""/4096) [ 689.951803][T19954] vhci_hcd: invalid port number 255 [ 689.977185][T19954] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) write$P9_RREAD(r0, &(0x7f0000000040)={0x5f, 0x75, 0x2, {0x54, "674c7837d369603bf169a9272f5aee57a4212deaa9aad41d0fbec20291b85c0bc79d30aefe39c6b16473413086ca7a467727373839c526196b96e491d5646dabe106d76dcb13355c3a047415b1fe488b722e1dc1"}}, 0x5f) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) [ 690.040707][T20014] vhci_hcd: invalid port number 255 10:11:22 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000003}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="180025bd7000ffdbdf25010000000000000009410000001400187acdb3b77564703a8d797e3100000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040811) [ 690.069058][T20014] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:22 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:22 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:22 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) [ 690.282828][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 690.286637][T20184] vhci_hcd: invalid port number 255 [ 690.288682][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:22 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) read(r0, 0x0, 0x2f) [ 690.326819][T20184] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 690.371010][T20346] vhci_hcd: invalid port number 255 [ 690.409021][T20346] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:23 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000200)={r2}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) read(r0, 0x0, 0x223) socket$inet6(0xa, 0x0, 0x40007ffe) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) 10:11:23 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:23 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:23 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/23, 0x17, 0x2000, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) 10:11:23 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x109a00) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001900)={'syzkaller0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001940)={0x1d, r1}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:23 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 10:11:23 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) 10:11:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x10001) read(r0, 0x0, 0x223) 10:11:23 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 691.110801][T20626] vhci_hcd: invalid port number 255 10:11:23 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:23 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") prctl$PR_CAPBSET_READ(0x17, 0xb) read(r0, 0x0, 0x2f) [ 691.163003][T20626] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x20) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) [ 691.229530][T20632] vhci_hcd: invalid port number 255 [ 691.248210][T20632] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:23 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x80000001, 0x100000000, 0x400, 0x2, 0x7}) 10:11:24 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) 10:11:24 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x90000) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x800, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x6, &(0x7f0000000000)) close(0xffffffffffffffff) 10:11:24 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:24 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:24 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000100)=0x400) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x3, &(0x7f0000000080)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) dup(r1) 10:11:24 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x40040) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, 0x0, 0x2f) ioctl$CAPI_INSTALLED(r1, 0x80024322) [ 691.998919][T20968] vhci_hcd: invalid port number 255 [ 692.007923][T20968] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:24 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 692.094938][T21079] vhci_hcd: invalid port number 255 10:11:24 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000100)={0xc, 0x7ff, {0x52, 0x2, 0x2, {0x1, 0x7}, {0x2, 0x5c}, @ramp={0x8, 0x0, {0xfffffffffffff001, 0xfffffffffffffffc, 0x6, 0x1}}}, {0x54, 0x9, 0x52, {0x54f0, 0x8}, {0x20002, 0x400}, @cond=[{0x8, 0xffffffffffffff80, 0x8, 0x8, 0x81, 0x200}, {0x8000, 0x5, 0x5, 0xff, 0x4, 0x6}]}}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="1ed8c81ce28ae778100000") pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') io_setup(0x800, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r1, &(0x7f0000000240)=0x4) read(r0, 0x0, 0x223) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000280)={0xfffffffffffffffe, 0xffff, 0x1, 0x8, 0x10, 0xd36}) writev(r0, &(0x7f0000001380)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000001180)}, {&(0x7f00000011c0)="f0d2fc2b9b3cb59bc459a57b990a5bd1d627bbf25cd1ea1f80f034c7fc392261a4b75a733b1168ecd3b8b8c4ce532f42e109ea25f496e8779a24081dbf3865a688b47c9b25bd432a8005bba827400ab790f55214e2a692d8f46669251eb206fe152c4f1aa6a3219e49ac17e0bacc4c95faec099d9665b0e461ca93c06ef817aeb5343b71978c5cb9b1f031faf3bd9e", 0x8f}, {&(0x7f0000001280)="e7cc3ce4ef3aa8b96704f8a19bbb9dc6b0d591dd3461bba1abfa4ef8559106095582c2a134a3ff2da471e738f93c6bb50d7bc15f766de9096cc391cca49c0856fd169386daf90f6bc1fde0ee1f769f4d807fa91b815baf64caf7de1eddd8044165e7f2c38d75a1a4f85fc661cfb6858aae5fb12d15d2cd467adb8ecba134a40de88e4c36a2e15d83441c3b0444cd467e293315e517a5205a44738daf52dbbe9ca39816fcde8c9283f12f8749b541bbd896e8f862d496b43a1f71f0e0b47be46a4ff6864f802c1c4adacfd5ed148c16033c871d34e7c0e2", 0xd7}], 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10) ioctl$PPPIOCDISCONN(r0, 0x7439) [ 692.122943][T21079] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:24 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x7) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:24 executing program 4: setitimer(0x0, &(0x7f0000000080)={{0x0, 0x7530}, {0x77359400}}, &(0x7f00000000c0)) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) [ 692.352437][T21209] vhci_hcd: invalid port number 255 [ 692.362425][T21209] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 692.392562][T21290] vhci_hcd: invalid port number 255 [ 692.408899][T21290] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:25 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000180)=[{r0}], 0x20000000000001e0, 0x0, 0x0, 0x3c5) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:25 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000000)={{0x7}, 0x8, 0x0, 0x9}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r3, 0x0, 0x2f) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000200)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) fstat(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file0\x00', r6, r7) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000440)={0xfffffffffffffffc, 0x8, 0x3, 0x3, 0xef83}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)={0x0, 0x61d2, 0x4, 0x71ba, 0x6, [{0x2, 0x5, 0x852, 0x0, 0x0, 0x200}, {0x1ff, 0x6, 0x80000000, 0x0, 0x0, 0x2080}, {0x401, 0x4, 0x401, 0x0, 0x0, 0x4}, {0x8, 0x7, 0x4, 0x0, 0x0, 0x2008}, {0x8, 0x35, 0x9, 0x0, 0x0, 0x2888}, {0x6, 0x7, 0x7fff, 0x0, 0x0, 0x200}]}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 10:11:25 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) 10:11:25 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:25 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r2, r3, 0x39, &(0x7f0000000280)={0x40, 0x4, 0x3ff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) r4 = accept(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2208}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}}, 0x4040080) close(0xffffffffffffffff) [ 692.786211][T21322] vhci_hcd: invalid port number 255 [ 692.791618][T21322] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:25 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") poll(&(0x7f0000000040)=[{r0, 0x20}, {r1}, {r0, 0x2}, {r1, 0xc0a4}, {r1, 0x4000}, {r1, 0x8040}], 0x6, 0x200) read(r0, 0x0, 0x223) 10:11:25 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:25 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:25 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:26 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 693.434840][T21322] vhci_hcd: invalid port number 255 [ 693.440148][T21322] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:26 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10000, &(0x7f0000000080)="86c2c573d931bfeab3d2f59959075368b116dd0596ac45a7824b0d8b57bea084c94d1c7c8a7d580ba704985a33f08dc2f19c5db58def4df992a1b09244765c787795a73fa162cf03be3f0f5b72881811c7c4ff") read(r0, 0x0, 0x223) 10:11:26 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0xfffffffffffffffc) r2 = request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r2, r3}, &(0x7f0000000340)=""/218, 0xda, &(0x7f0000000580)={&(0x7f0000000440)={'sha512-ssse3\x00'}, &(0x7f0000000480)="db6b56800d84895294ecf1b48e30966fecb2635bd691b12903d38ee77e9a5097c82f3b75e344dae6edba9a30938b312f190d6bb0454513678e21868edd3cb858b254e9fe4d0cad56b1ffe942be6fac961ca2c0104490b80418071e71ad4dc22e549f96932b8597fa4b920f149be7be46d2b3a4e1a03ec0c3c9a59149ac64e979098a0bc5f046c7a7422984c31328f27c2bd47d71b4ab5d72b68587b677b2f12bf49a4a8c45737f3d4e13849709092cbd1113bcd88487e92102a7d65df889a57ee4a288079941a4465650582f9698a3575147b8826811bb7e52", 0xd9}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x1, 0x3, 0x7fffffff, 0x38, r0, 0x80000000}, 0x2c) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:26 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:26 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) accept4(r0, &(0x7f0000000140)=@can, &(0x7f00000000c0)=0x80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$NBD_DISCONNECT(r0, 0xab08) read(r0, 0x0, 0x2f) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:random_device_t:s0\x00', 0x25, 0x2) 10:11:26 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 693.722871][ C0] net_ratelimit: 16 callbacks suppressed [ 693.722881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 693.734471][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:26 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f00000007c0)='/dev/usbmon#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@local}}, &(0x7f0000000940)=0xe8) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@initdev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000b80)=0xe8) r6 = getgid() r7 = getpid() fstat(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/dlm-monitor\x00', 0x1a001, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003180)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000031c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000032c0)=0xe8) getgroups(0x2, &(0x7f0000003300)=[0xee00, 0xee01]) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003340)=0x0) lstat(&(0x7f0000003380)='./file0\x00', &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = gettid() lstat(&(0x7f0000003a00)='./file0\x00', &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getegid() r20 = accept4$tipc(0xffffffffffffffff, &(0x7f0000003ac0)=@name, &(0x7f0000003b00)=0x10, 0x80000) r21 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003b40)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000003c40)=0xe8) r23 = getegid() r24 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003c80)={0x0, 0x0}, &(0x7f0000003cc0)=0xc) lstat(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000041c0)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000200)="6c311bf3202ebb30da7ed73a06c4da63f7743b7f23019b257277788ece681b77ee30a3aa0e214df341bbc9b49193d03e3b5279a104a588773cc09873f6c88782af9802091577cc8d9db4c959539adfd617f908fcdf1beb746513b33670e221d51c47c9cadf01771efe0669dd060b7f71ad74c3f5896bb5e988661eefa5a1549c2d164d3e4c03d43299c67f9b804396c523762cbccfa56da4c9defdf0a71894f789d3fc2564afcb8a3f1ac17c9778a76fd9f3ddcd5b4080e773f157d5c218753c96c57eaf1e51e45e0ccffee1accb085d1104c1e4486288", 0xd7}, {&(0x7f0000000300)="86cf3488b9f780e010323583d1f4ce636604297ae3f7440d32f276fdb8c2a43852492428e8f85b9ec535fc87d80c8a9261bcf02ab456236cebe283c83795aa197b6d73e41107eec554ce8809cd15c2d3a0e6cec5a71494a65023a18bd83b3f122e5e5271f2926fc11b77d6825c5904367fc0609992ba70fe47498c4c15dfafca3fccd43f236a082a5a78ca61f25b96f7cb88cb0dd7420d06580a2ab2cb939932175392c2eb228684818a5f23cf723f9675f5b39bdc4afa3dccfea90aeb037144ba684e4188c287a57ab9dca2d7dc4917bf93dbdb537e3c0f95c1993ee08a75f3ecb716f080fad88a09bad2", 0xeb}, {&(0x7f0000000400)="6abfffe22c81b9f906e4e2fa3a9ba9ef05116749149d59ca4fae61767137b081254e9c1814aae4", 0x27}, {&(0x7f0000000440)="75ea10ac36d4b30e72c276b193f4be090ce82b7edcf6015d4e32276a2949be4e92ed519598f9e52ce58879f6c362803afe66180d87ee255a94eb9a391f18e66bc530534e8d7335361a9590f2ab1fb56cc6759c39a34bc652947885ce86b41043f2ddc20356a5329a86c0abef70feec8cf16777487cef5d86054690aea31adf44a97e79658665d20f859af1e784c573b1b1662b78a60d4e63e7a9e6630026750025862fe79b0c32d7096bbd3a1e8be2fc46e176759789b83b9e0d022d179fbb8fa15ad5c8163df0fc4e3076", 0xcb}, {&(0x7f0000000540)="c505da75c3115cdf90ded0f2c395622e6f9b80932588db758d89aea584811ee61053232efe0ecd43b685ade78caa627d407c6b311cdfdc795f223e4431a8a16d43a5f1d999db3675ee758a0a3b1d216ce89bd66829ac6650e85932114b9da7bf0f3cfdb13f35f4a4c9e40e92538154d4", 0x70}, {&(0x7f00000005c0)="47c8a0a034daab29c97353319ff8f69efbb324435bd69c3a430f73e9ef2d", 0x1e}, {&(0x7f0000000600)="7254fb4784189cb8a06ec6e252d678ef649b10e037935676ea5f45946ad76e7530aede2708d9f3782ba2b591e033133187477b493973f5535f98fc19", 0x3c}, {&(0x7f0000000640)="52f104b3e51f7cc23a1ad9f670e89077fb098c419f43b29869044ff58f8a2a45d32e8b554654f708724d269820c916086bbbc823ad34bc85193d4d3ebe761e1004288fa4f512a83262b5afb8e8b2f125e0b7f5fa1a0b037e614060cb1824dc52cc39e9113f8771eefb28156ce922ba3548d4f3bc25911fb61a1f8426de7dd9678b177a65ab68db2da1fabc18f9f7f255a95a16d3d010e73c5f920496ada3f137384ce825fab6302d232fad4ba483c8b7907f7922c68276c43d7358c3da6b6ee0aea7eaf9f769495eb1f5a267a7f939d08abb4f4bfd", 0xd5}], 0x8, &(0x7f0000000cc0)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x60, 0x400c001}, {&(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000dc0)="f95118c6b5d62de9d77755c853012df2156e3c9c5eecae156bbec842d073c97a267ff12940b42879c3140b10eb31ac21df4f2c17d0f4ece3574e2a9c7359f68a39cdf1365dea889577867b31358c6159be8cc0e0b0eba701c6", 0x59}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="e9c457e2bb78a95e7969820c917d653d04e9e72a62274c0a61b462f55705c7eb4e9af00b257e7476fc52b008f0dcc3fee6", 0x31}], 0x3, &(0x7f0000001f00)=[@rights={0x18, 0x1, 0x1, [r10]}], 0x18, 0x4000}, {&(0x7f0000001f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000001fc0)="e0f506c73e073d2f6d3fdb4194a8dabd71f11efd36d742189d5fe8758d7a5101a0826e201dfc0fd766ab200186da320b5923edaf8512c4bd20042f75cb344dbaf0cd522134e9a1c8e23fc69cd12f39c8ed17d29edcc5d5f81ac0166428e3f70e7b9554aa9cce59b3f8d8d4487459fdd5d8381d1b136c09b99af2d8d0777ce32edf55a43b6d633d9f7f0d", 0x8a}, {&(0x7f0000002080)="7227a79ce00ecec798c09e49a90b3a5d031ab82e04ad50f3085e85ec21bb04c572c59adf26e1341563c22f15dae3930c9bb106a5e3b1a55db1dd517ecdec47a1b7255cc307649e123768358a5f24d90adab3f8ab3a5e4419592afa9ccdfb7ec7062a3a2104cf03b0fd5ec4fb4bd0e45b2775720ccd7fe9fab8c2c211b0397970ebcf4005d798cdd983beb4842462d722b9f3fe2020660e4950f5a5fea72f74d0d0f8567a9f03680f2f738cbe97922c0406e1d442", 0xb4}, {&(0x7f0000002140)="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", 0x1000}], 0x3, &(0x7f0000003500)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0x40, 0x4044}, {&(0x7f0000003540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003980)=[{&(0x7f00000035c0)="b10d6f6335cc16d939544625df6189f0d07d1c50b485905c", 0x18}, {&(0x7f0000003600)="52dae7df21e61b814b5282060910358afc0dfdedf1111852c8c8d87667ecadece93caeb80e97f8185b1132b6a41dda43fb3dc8df69a6ca9c50483672ce983cefd1ac2cbce59e0dc406645c196db302af127fe6b4919009f9d024c676a2ecc6cac19d3546690e33448415f97df5d20f5bb4d66581e5eb7524eb8462366c8b97473e55927abb5e7e27ebdee0c9a682d525e709627b4b05fdf2fbf29ea16a31a85c451e55172ef22baf7ac36c0e", 0xac}, {&(0x7f00000036c0)="6a7b26a7728b47f81ae90f8c10fac45adef8722500d5feccdcf3e09726f46f748c04291ca74bfc2f4daf3b238e5b06ec9531a7f80aaee9ceb781db0caf82e8f57bff9865a7dd0fab5c63c151ae53ad9f4e4bbd2e4c5e36efa1fe9cc63379e8c556b25e55c9cf9fefdb1991eab97ced5f67518d86442af55e8f31507aca147358c3e563a108b31064f819c8100a854d227373f32c09b38aebeb68a4e520746df72cdad36885d2549bf85c856bb3326a81c0f42dac411e6eb706f97e60d86829529c9fe8b6c9feec991d5f5a6444793d3fa29b3f83a26290d8095c8545f5d8003d75c8ed9e3298da26dfb9c0b96c0cd5", 0xef}, {&(0x7f00000037c0)="8de47fe221c314152bef4c9d40916ee6c98675f37ca3929a841524cecbad76b7ec1e8b87fe364754667a6446108696ee86228bc5a9947eac0908e15cccedf72e25d48c3d382653f9fbd97ac0988e628126f397f9e1191c212f90d0d4ea2444e2340e238f3e80d06cab4f1c6a5adf11fb9be6b22b980297ede7c75bba57d07e1089ebd8179e4ff9c5370d461da1f41a2a766f998b63c6870628d8488d9993a1027fba", 0xa2}, {&(0x7f0000003880)="80c72de5dfe944da944853d47d1dda31a63ca0ee3542dc1b1a4906c2b3896bedd5e74bde8b75c468f47dcef21b9d5236c07fcfd2f5c8c516163bd94da0c461f604f42e9210096254813be0631eed482c2d295193f7138e14f00f21f4a983d1a59e2d4315d9261f0e84d42f8841750feb1a9439dba19238630a530b1c10f08427c127a794020af7de26614d1d6d0377fc2321ccb79de7efde57c5ec8001deea44d07f5c8dd2af6331f1d50090a020913a2b2246979d43ab68f5d481d63d218a2490", 0xc1}], 0x5, &(0x7f0000003dc0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r20, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB="49597fca"], 0x78, 0x44}, {&(0x7f0000003e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000003ec0)="2aa172cca85c8c82295bc9ef783698086223cf460b54364593b0c6f1cf4a9c093c1ed9fb9e7a5654d5c5ee1dbd3f9c965785c8f42f0d6dd177341896ce37b36c818640cbe38a7a7bd76c9efab2afc90c90a0ce7902dcc95fe4c6f213129ab30abc8a00aa3bc1e50edc1e4520820cd87c473681c2a0d1bfcf94500680a711ad75e72d5320b38ab399b810238a4015f9df8425e19462e50f8241554f404d35e33b833dd7db9d074c309e2db72b19f5", 0xae}, {&(0x7f0000003f80)="c63a0b8c88162e98a1ceadd05a5d025a685b275ea6ac61", 0x17}, {&(0x7f0000003fc0)="22ff80656987b82611fa7cb96d6efb99e5fa0d628602db6cb74cb5bb7aff9d773c77f2e2ac4554c7f8c8488bb6d649378a8ed89bfe8c76f5237bec344c745661bf8ca0c2dc06fa2082559334a32078548e26867cb5aa563dfabc7beec2a95a37cc1aa8922aa3d0bfdb7b59341116558d1c039c29e170", 0x76}, {&(0x7f0000004040)="c9ac2a47021d70b88403798f879bcf478e9613e669ad54e9d93e25", 0x1b}, {&(0x7f0000004080)="1e9c6c1d791b96a546c2e607637920d2c6d9f7dc864705e01373b392153bd1c9726126bfbe08fcc17958139f253c8ad83d74145c0d843f563e66a01a3c19ed09f9111da45b1f6e5ce9891befc71b9f8e90e2f7adf8d0585f555ebf1bffaaea3e288729fa8b8d2bbcc39b646d414de0b12e47a85f8497a537c4d2afd22fc89b798e27a29b9c", 0x85}], 0x5, 0x0, 0x0, 0x40001}], 0x5, 0x40) r27 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r28 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r28, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r27, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x65af39e5}, &(0x7f0000000080)=0xfffffe7d) setsockopt$inet_sctp_SCTP_CONTEXT(r27, 0x84, 0x11, &(0x7f00000000c0)={r29, 0x401}, 0x8) read(r27, 0x0, 0x223) [ 693.791041][T21887] vhci_hcd: invalid port number 255 [ 693.802982][T21887] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:26 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0xfffffffffffffee5) 10:11:26 executing program 5: socketpair(0x8, 0x4, 0xd01, &(0x7f0000000240)) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:26 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 693.935210][T21951] vhci_hcd: invalid port number 255 [ 693.940494][T21951] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:26 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:26 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2}, 0x10) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:26 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(r0, &(0x7f00000001c0)="3b172c67e85eb8cae6e427e74054d4a29350dd44e0c3ccd02f3a9ca247a762006405d500fc0739cec7ff10a8e4126b5ffb0808000000000000001ff88a80f21fed7152d9f95abb4799f85e2834fde579098c3e10c0fd3f34db1dd46fb3ff2d11ef399f2029c5107422b52ecb02fcd0ede09c47d4b616de2fbd00f4b3b746061125f90b32d22126bbc760823438128ff4123c9507000000a611d78083f5b0142ea30d30", 0xfffffd01) r2 = request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000280)="5927a998f1b6e3490a746d45d6f9c2f9d29709507f84bb26e08469fffb19d05abe0532ec91366b322f7fc913206768f4fc5af79654f6b0db09803b96788c33d11b799ea4b92484446658a67f92c64ba844fd5dc90da6054033b06e8e190c0b7925ac9f3a22e1b83eceaaf222ba8ba65803a76c34f0e931f9cead2e0f19b6b7d5f15ecd61dac41cd4ec255f996b8af824ebea9bb889a28357dc993daa91057d65303a57ae1fc806ebb7709550fd589559d7195376c1fa8c80bcda1fead5d8ef0cad906057aa3c7d", 0xc7, r2) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = getpid() write$cgroup_pid(r1, &(0x7f0000000180)=r3, 0x12) 10:11:26 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x22) [ 694.167345][T22116] vhci_hcd: invalid port number 255 10:11:26 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x80, &(0x7f0000000140)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x81, @local, 0x6}, @in6={0xa, 0x4e20, 0x9bd, @dev={0xfe, 0x80, [], 0x13}, 0xc125}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3b}, @in6={0xa, 0x4e21, 0x4, @remote, 0x639}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) read(r0, 0x0, 0x223) [ 694.205407][T22116] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 [ 694.279917][T22188] vhci_hcd: invalid port number 255 10:11:26 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x200802) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, 0x0, 0x93a7b6cb68d4235a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="04000000000000000a004e2200000005fe8000000000000000000000000000aaff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000a004e2200000000fe80000000000000000000000000001301040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe5724999ef9d4e1eb1dee6204000000000000000000000a004e2400000003000000000000000000000000000000014f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000000010000000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400005e2fff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000000d9f434ad7d5296a03e7536b0946b8851e305000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000000c7fe80000000000000000000000000001b5e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000000c0fe88000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x410) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)) 10:11:26 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 694.309202][T22188] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:27 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1000003, 0x20401) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x3) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x516) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xa9, 0x3, 0x5, "3659a670beb02b311b55bc853dd6f423", "777aa2f91c5f537a48a92fd9237d8564bb3c9690aad5da34ba7cac39bad838bf3396055f76a5de87eca6560e07065d41c15321754318753b18705f2b3be0239a0666346d4698984a15b62348b47f61cb4ba49738838a09609c3126e09c68aefee07ce5658183f96cc718a4da05fce140410f021ba8a9f59a9abee125d863c8508ff971e02b094d4f2b01999418b96834d5aee9d0"}, 0xa9, 0x3) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) [ 694.442863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 694.448721][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 694.683371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 694.689596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 694.696555][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 694.702878][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:27 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0xfffffffffffffffd) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='sit0\x00') ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffe51}], 0x1) 10:11:27 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) 10:11:27 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x80000000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) pread64(r0, &(0x7f0000000340)=""/241, 0xf1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:27 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000000)={0x3, 0x3, 0x6, 0x2}) 10:11:27 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 694.922839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 694.928633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 694.989213][T22554] vhci_hcd: invalid port number 255 [ 695.022216][T22554] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:27 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)={0xfff, 0x1, {0x3, 0x3, 0x2, 0x1}}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x6, 0x7f, 0x100000000, 0x80, 0x13, 0x3, 0x8, 0x3, 0x3, 0x22eb, 0x5, 0xfffffffffffffff9}) [ 695.068151][T22570] vhci_hcd: invalid port number 255 [ 695.095583][T22570] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:27 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x73fffd, 0xffffffff7ff0bdbe}) listen(0xffffffffffffffff, 0x4) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) accept(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 10:11:27 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:27 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:27 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x10000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000500)={0x1f, 0xa998, 0x100000000, 0x40}) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x8000000d000) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x10000) arch_prctl$ARCH_GET_CPUID(0x1011) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)) read(r1, 0x0, 0x2f) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0xff, 0x4}) fstatfs(r2, &(0x7f0000000140)=""/135) 10:11:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x101, 0x1}, 'port0\x00', 0x80, 0x40000, 0xfffffffffffffffb, 0x5, 0x101, 0x80, 0x80000001, 0x0, 0x4, 0xffffffff}) read(r0, 0x0, 0x223) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0xb2ee, @rand_addr="52adccdc4a08559341921232b7127542", 0xd4}, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x8}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x48) [ 695.366421][T22782] vhci_hcd: invalid port number 255 [ 695.398909][T22782] vhci_hcd: default hub control req: 0000 vfe00 i00ff l65535 10:11:28 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0xfffffffffffffff3}], 0x1) socket$tipc(0x1e, 0x2, 0x0) 10:11:28 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x244000) 10:11:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x10000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r2, 0x208, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x600, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x0) 10:11:28 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:28 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x80000000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) pread64(r0, &(0x7f0000000340)=""/241, 0xf1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:28 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:28 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:28 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:28 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:29 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:29 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:29 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r2, 0x0, 0x223) 10:11:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1, @loopback, 0x2}}, 0x7ff, 0x0, 0xffffffffffffffe0, 0x1, 0xe1}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={r2, 0x1, 0x1000, "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"}, 0x1008) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:29 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) 10:11:29 executing program 2: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:29 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:29 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:29 executing program 2: r0 = socket$inet(0x2, 0xb, 0x97) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001100000000000000000076657468315f746f5f7465616d000000736974302000000000000400000000006272696467653000000000000000000076657468305f746f5f627269646765000180c2000000000000000000aaaaaaaaaa0000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000110000000000000000007465716c30000000000000000000000073797a5f74757e000000000000000000697036677265300000000000090000007663616e30000000d53fa73b00000000ffffffffffff000000000000aaaaaaaa98aa00000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x250) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000940], 0x2, 0x0, &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00\x00\x00\x00\b\x00', 's\x01\x000\x00\x00\x02\x00\x00\x00\xff\xff\x00', 'vcan0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0xb0, 0xb0, 0xe8, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}]}}, @common=@dnat={'dnat\x00', 0x10, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f0) 10:11:29 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x27f, 0x4c0000) r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40084504, &(0x7f00000003c0)={0x0, 0x0, 0xfa00, 0x0, "0000e1d1ea0000000000000000afa68a69da0000000000000000000800"}) 10:11:29 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:29 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x480, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000400)={0x7, 0x33, 0x1}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffffffffffffffc, 0x0, @mcast2, 0x9}, 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="65308dc9ba22dfcfd218900a"], 0xc) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f00000001c0)=0x4) finit_module(0xffffffffffffffff, &(0x7f0000000080)='(}\x00', 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000340)='ppp1\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}, 0x0) 10:11:29 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 697.331695][T24116] QAT: Invalid ioctl [ 697.387173][T24116] QAT: Invalid ioctl 10:11:30 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x4) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:30 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r2, 0x0, 0x223) 10:11:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {{0xa, 0xfffffffffffffffc, 0x4, @mcast2, 0x7}}, {{0xa, 0x4e20, 0xd0c, @rand_addr="294aea6cb59b6fc0a9cac25bab337e43", 0x8}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="1184332a62d14aac1ab8d07e20487e4bca35576c7ccf09209bf795551bab3f2bc45e06dba29d414f41f43c66bb72e7c1b443fb79e14bfc094477d41d125adad91670b8c7646a5ba8ca1eed1376a33c6b456c7e6389b82715d50bd61708f57b0097a98bbe5e9671bb0bd6b0e4ba403fca1bc333970f4975cb8040974a36da8a8bb1a53fac8766c67d2d03841627ac219eb126bc899a553a01005bbf3d2c7866e956a2f675d1ad7986fe2ee7c0c780aa87a2e60cf3a6adbf162fe28cffce54c3a95783b98db677fa0433752cc1f9f806f92d4c94", 0xd3) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x26) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz0\x00', {0x4, 0x401, 0x0, 0x4}, 0x56, [0x0, 0x1e78, 0x0, 0x7c8, 0xffffffff, 0x1000, 0x400, 0x6, 0x6, 0x80, 0x2, 0x7fffffff, 0x2, 0x7f, 0x6, 0x31a, 0x40, 0xcab, 0x2, 0x4, 0x1, 0x100000001, 0xcb, 0x100000001, 0x0, 0xcbe, 0x6, 0x5, 0x1f, 0x3ff, 0x62dd9134, 0x2, 0x7, 0x10000, 0x4, 0xa0d, 0x6c0, 0x8f7, 0x3ff, 0x1, 0x7, 0x4, 0x3, 0x8, 0x8, 0x6, 0x0, 0x5, 0x3, 0x100, 0x3, 0x7ff, 0x7fffffff, 0xffffffffffff7fff, 0x7, 0x1, 0x10001, 0xfffffffffffffffa, 0x20, 0x0, 0x2, 0xfffffffffffffffd, 0xffff, 0x1], [0x2, 0x9, 0xfffffffffffeffff, 0x7ff, 0x5, 0x6686cee0, 0x6, 0x5, 0x0, 0x0, 0x1, 0x9, 0x200, 0x20, 0x3, 0x1, 0x4, 0x3, 0x0, 0x1f, 0x7f, 0x7fff, 0xc9f, 0x0, 0xd4, 0x0, 0x7, 0x1, 0x6, 0x2, 0x4, 0x6, 0x6, 0x5, 0x20, 0x2, 0x7, 0x100000001, 0x9, 0x7, 0xffffffff, 0x1, 0x289, 0x1, 0x1, 0x5, 0x4, 0x4, 0xfb, 0x200, 0xfffffffffffffffb, 0x4, 0x81, 0x9, 0x8000000000000000, 0x3f, 0x7, 0x5, 0x0, 0x6, 0xffff, 0x3, 0x2, 0x864], [0x7, 0x339, 0x5, 0x7, 0x7ff, 0x4, 0x27d7, 0x496, 0x13, 0x100, 0x2, 0x3, 0x9, 0xffffffffaaa56181, 0x3f, 0x867, 0x1000, 0x5, 0x46864189, 0x7, 0x6, 0x2, 0x1cb, 0x0, 0x55d1, 0x400, 0x8, 0x619, 0x5768, 0x5, 0x0, 0xffffffffffff7fff, 0x3f, 0xfffffffffffffff7, 0x2, 0x25, 0x81, 0x1, 0x40, 0x4, 0x5ba, 0x1, 0x8001, 0x1f, 0x8, 0x100000000, 0x2, 0x1000, 0x2, 0x118, 0x20, 0xfffffffffffffff7, 0x80000001, 0x4, 0x2, 0x1ff, 0x8, 0x3, 0x5, 0x1, 0x9, 0xfff, 0x100, 0x1], [0x5, 0x0, 0x773, 0x7, 0x1, 0x8, 0x6, 0x100000001, 0x8000, 0x10, 0x4, 0x5, 0x8, 0x2, 0x401, 0x1f, 0x5, 0x401, 0x4, 0x5, 0x80000001, 0x5, 0x8, 0x0, 0x9, 0x4, 0x8000, 0x6, 0x40, 0x4, 0x5, 0x5, 0x5, 0x0, 0x5, 0x0, 0x4, 0x3b, 0x3ff, 0x5, 0x0, 0x7, 0x9, 0x9, 0x19, 0x10000, 0x9, 0x0, 0x101, 0x2, 0x8001, 0x8, 0x4, 0xffff, 0x0, 0x100000000, 0x80000001, 0x7fff, 0x0, 0x2, 0x6e47, 0x2d0d271d, 0xeb2, 0xb1a]}, 0x45c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000100)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="610000007d010000004c00c30b03000000000000090000000000000000000500000000000000000004006574683000001500747275737465646367726f75e9ec9cce716e96be88c6ad5117adad1f706e6f646576403a5d000066578dc76dbb2b448936a68d4dcd69ede60385af76da", @ANYRES32, @ANYRES32, @ANYRES32], 0x72) fadvise64(r0, 0x0, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) unshare(0x20000003) socket$packet(0x11, 0x3, 0x300) statx(r0, &(0x7f0000000200)='./file0\x00', 0x100, 0x800, &(0x7f0000000280)) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000380)=0x100010, 0x4) syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x1) 10:11:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, 0x0, 0x0) 10:11:30 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:30 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0xffffffff, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f0000000140)="8fd706997da1f5726f24fca1705b60566a832ed624e1b34d990e4ca3ac3dfc227bf6a1efc5a7d00a86219c9240ac9fdd55f9d9d132928a7b5280a0b94ba5eb2665611ed003c754423e985fe89e6aaedab5a6babfbc1cdbca9f2beb41e4aee64eb4980fb0b248d74de869f38113a0d65db631c76f9167bd5c7957daff1fbf21b23b1104fb1eb57c2887766ef596b63c07c17b68ecb43ada7017af6acbb4b38a2b4477f06d89163922701463e35bda248286faa2e9ad443bc6f50b1d38e84adc749f8f28dc91cb67d19f6c10d004b88a9a1ffd3a43ccf3e1", 0xd7, 0xc2ee, 0x0, 0x3}, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x0) 10:11:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x1, '-'}, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:11:30 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:30 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:30 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2b) 10:11:30 executing program 2: getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x8d, [], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)=""/141}, &(0x7f00000002c0)=0x78) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@report={0x84, 0x20, 0x200, 0x70bd2d, 0x25dfdbfc, {0x2b, {@in6=@dev={0xfe, 0x80, [], 0x1b}, @in6=@empty, 0x4e23, 0x400, 0x4e22, 0x1, 0x0, 0x20, 0x80, 0x3f, r1, r2}}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd2a, 0x8}}, @ipv6_hthresh={0x8, 0x4, {0x61, 0x1e}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2c, 0x3f}}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20008004) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x100, &(0x7f0000000100)=0x0) sysinfo(&(0x7f0000000340)=""/37) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x2) io_submit(r5, 0x1, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_cancel(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 10:11:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000001240)={0x3d, 0x8001, 0x2, 0xb6, &(0x7f0000000140)=""/182, 0x1000, &(0x7f0000000200)=""/4096, 0x38, &(0x7f0000001200)=""/56}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='/dev/usbmon#\x00', 0xd, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:31 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r2, 0x0, 0x223) 10:11:31 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:31 executing program 2: r0 = syz_open_dev$video(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000140)=[{r1, 0x4}, {r0, 0x615d}], 0x2, &(0x7f0000000080), 0x0, 0x0) 10:11:31 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:31 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x6000)=nil, 0x3000}, &(0x7f00000001c0)=0xfffffffffffffdee) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x21, 0x0, 0x0, {0x2, 0x20, 0x0, 0x8, 0xff}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) 10:11:31 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 698.842817][ C0] net_ratelimit: 14 callbacks suppressed [ 698.842825][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 698.854340][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 698.860155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 698.865960][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:31 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x64001) 10:11:31 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) 10:11:31 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 699.082815][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 699.088763][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:31 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x501000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x6, 0x19, 0x10, "097adfaef15bbbf8a74b317ebdf275caa303bc74863d82d464821bef72079d414ca37986399b414e8b331b88f450a1bc66e37e72f82f3499d5e7c66fffd15549", "925b6833a27fed3d4c51dde3bcdf5fc72fe23c093a190db1eaf297fa849fbb1e962d08c6ac27c203792b6bbd89057289e547789361d6fffca4aed63b1a10a25d", "3e16fc3d93c1f469489cb77bbb0eceb74c1cfd8494a52f8508ca367900381738", [0x80000000, 0x5]}) r1 = semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000240)=""/128) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x0, 0x2}, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0x80000, 0x0, [0x8, 0x1f, 0x33991d27, 0x1, 0x3, 0x100, 0x1, 0x8]}) bind$tipc(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, r4, 0x101, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) 10:11:32 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x51, 0x800070042) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:32 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:32 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:32 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@getstats={0x1c, 0x22, 0x301}, 0x1c}}, 0x0) socket$key(0xf, 0x3, 0x2) 10:11:32 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x0, {0xa, 0x4e22, 0x2, @remote}}}, 0x38) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), 0x4b48890810e55a69) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f0000000000)="f7", 0x1}], 0x1, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 10:11:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000080)={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff86dd60a1010000800000000000000000000000000000000000aafe8000000000000000000000000000aa0620880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200006000200000000000000000000000800655800000000"], 0x0) 10:11:32 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:32 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x6, 0x8, 0x9, 0x9, 0x2, 0x5}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 10:11:32 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x1c2, 0x10400003) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=r2) 10:11:32 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 699.962873][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 699.969084][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:32 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x48000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x9e0, 0x627, 0x8, 0x0, 0x5, 0x442, 0x4, 0x8, 0xf0bc, 0x4, 0x2, 0x9, 0x0, 0x4, 0x6967, 0x81, 0xb33, 0x1, 0x40}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockname$inet6(r2, &(0x7f0000000000), &(0x7f0000000040)=0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x1}, 0x8) close(0xffffffffffffffff) 10:11:33 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") socket$inet_udplite(0x2, 0x2, 0x88) 10:11:33 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, 0x0, 0x223) 10:11:33 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:33 executing program 2: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10, 0x800) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000400)={0x0, @loopback, 0x4e24, 0x4, 'ovf\x00', 0x1, 0x2f9, 0x15}, 0x2c) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x2, 0x0) r2 = dup(r1) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x7ff}, 0x2) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000040)) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000080), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000280)=[{0xfffffffffffffffa, 0x7fff, 0x2, 0x6, @time={r3, r4+30000000}, {0x851, 0x6}, {0xfffffffffffffff9, 0x8000}, @control={0x2, 0x8, 0x10000}}, {0x15, 0x5, 0x6, 0x2ab5, @tick=0xff, {0xb1, 0x7}, {0x80, 0x9}, @time}, {0x32894e79, 0x7f, 0x2, 0x7ff, @time, {0xffff, 0x1}, {0x5, 0x1000}, @control={0x2, 0x8, 0x5}}, {0x8, 0x5, 0x0, 0x5, @tick=0x5, {0x9c8, 0x6}, {0x5, 0x8}, @note={0x2, 0x3, 0x7f, 0xffffffff, 0x2}}, {0x3ff7, 0x800, 0xe3, 0x76c5, @time, {0x5538, 0xa165}, {0x3, 0x3}, @result={0xd2, 0xfffffffffffffff7}}], 0xf0) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000440)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000480)=0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r2, &(0x7f00000004c0)={r2, r1, 0x80}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0xfffffeb2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000100), 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @loopback}, &(0x7f0000000200)=0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x6, r8}, 0xc) 10:11:33 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 700.531507][T25973] misc userio: Invalid payload size [ 700.569788][T25973] misc userio: Invalid payload size 10:11:33 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 700.598536][T25973] misc userio: The device must be registered before sending interrupts [ 700.618913][T26016] misc userio: Invalid payload size [ 700.629491][T25973] misc userio: Invalid payload size [ 700.629684][T26016] misc userio: The device must be registered before sending interrupts 10:11:33 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 700.682916][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 700.688735][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:33 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) 10:11:33 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:33 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) preadv(r0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3, 0x2) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x81, 0x0) r2 = add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) ioctl$EVIOCGBITKEY(r3, 0x80404521, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000800)={0x5, {{0xa, 0x4e22, 0x980, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}, 0x0, 0x5, [{{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x17}, 0x2}}, {{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, {{0xa, 0x4e21, 0x37, @dev={0xfe, 0x80, [], 0x22}, 0x2}}, {{0xa, 0x4e23, 0x80000000000000, @remote}}, {{0xa, 0x4e22, 0x400, @mcast2, 0x4}}]}, 0x310) ioctl(0xffffffffffffffff, 0xffffffffffffff7f, &(0x7f0000000780)="da0373d9a376eefa62ced01d2ffd68ccfa44aa3d6f3418b39771f87d6d235bb8784f4207615de34a34213ac64759a809cf8bd0") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) write$binfmt_misc(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfe) io_setup(0x101, &(0x7f0000000040)=0x0) shmget$private(0x0, 0x3000, 0x16a424badf40a786, &(0x7f0000ffd000/0x3000)=nil) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2000000000080, 0x0) ioctl$VIDIOC_G_EDID(r8, 0xc0285628, &(0x7f0000000240)={0x0, 0xe93, 0x97, [], &(0x7f0000000100)=0x800}) ioctl$HDIO_GETGEO(r8, 0x301, &(0x7f0000000600)) io_submit(r7, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x4000, r5, &(0x7f0000000000), 0xfffffce4}]) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x1f, 0xfffffffffffffffa, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e5000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x40000000000004, 0x32, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x50002, 0x0) 10:11:33 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:33 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:33 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") socket$inet_udplite(0x2, 0x2, 0x88) 10:11:34 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1ff83c123f3167b070") read(r0, 0x0, 0x223) 10:11:34 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:34 executing program 2: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000140)="200000001a000b09ffed0000005037d78367f1d2a5dd7a1b7a23304b800071dee389407db6d1699e49c18f3ed80ee2d0cb416b0756309ecf9f8148e809b59361fe1641bf6e77c9c1d543077126cd4a5d61ee7715f921862f6550bb7dfc10c5ebe7d5242aacee69cae4fc9c9d0a9ce71c2da45f6d590f408303179b6c3a09000000a43f47a2", 0x5) read$alg(r0, &(0x7f0000000100)=""/38, 0x28f) r1 = gettid() fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x3, 0x2, 0x4, 0x9, r1}) 10:11:34 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:34 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:34 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:34 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ppoll(&(0x7f0000000040)=[{r1, 0x4000}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x80000000}, 0x8) read(r0, 0x0, 0x2f) 10:11:34 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:34 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:34 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:34 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") socket$inet_udplite(0x2, 0x2, 0x88) 10:11:35 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:35 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:35 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001200)='/proc/capi/capi20ncci\x00', 0x404101, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) bind$inet(r1, 0x0, 0x3da) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000480)={0x0, 0x4, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x1) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x20141043, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f0000001280)) syz_genetlink_get_family_id$ipvs(&(0x7f0000001180)='IPVS\x00') perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000001140)) ioctl$RTC_UIE_OFF(r2, 0x7004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000001240)={0x7, 0x0, 0x2, 0x200, 0x7fff, 0x7}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0x2}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001080)='IPVS\x00') rt_sigpending(0x0, 0xb6) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000011c0)=0x1, 0x4) r3 = semget$private(0x0, 0x80000a06, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000013c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000001480)={&(0x7f0000001380), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000040)=""/4096) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000010c0)={{0x0, 0x3, 0x8, 0x1}}) 10:11:35 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:35 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x1, 0x0) listen(r1, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x101, 0x840c0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000002c0)) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x8, 0x0, 0x0, 0x0, @ib={0x1b, 0x8, 0xfb6, {"aa187211bdb37f74b3339929d52d43a7"}, 0x4b2c1e01, 0xb55, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x401}}}, 0x118) 10:11:35 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x1000000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x8, 0xcb8, 0x0, 0x1ff, 0x3, 0xffff, 0x8, 0x8000000, 0x1, 0x5}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300), 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10) sendto$inet(r3, &(0x7f00000000c0)="e6", 0x1, 0x0, 0x0, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000000)) open(&(0x7f0000001680)='./bus\x00', 0x0, 0x100) 10:11:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f365fb459bba1aaf10711c141b410c450eaf45b11e5327649757449d9312d9a2cb5dc216982cb26e2f9ce0a45b6b6b6ea6208bb9939f12aab4a45e5be6a0f4b73aee655c6ced9255246014191c4fcb0e509007e5df1cb548a51a48be3a62892640e71d18fb0e1f1bb80d52f241b4e080b4baca9567743c1f065edd516600073e27e8079090f9f611db7147d50c6eeb760c101a0bc3cb123cc312e46ae6f43773ee34bb8fdc1a532234a8ff6b108dc34115ebf4fc0b58c0661d1cf17a9ab3842b2e7ce4e4a85ec26e48ba6559ba09aa1f298ed96003dcd90100df0fba4409e63da626b3e4585d555b2c2b85a9db293d804ef5fc1") read(r0, 0x0, 0x2f) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0xffff}, 0x8) 10:11:35 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:35 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:35 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) 10:11:35 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:35 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:36 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) signalfd(r1, &(0x7f0000000040)={0x3ff}, 0x8) 10:11:36 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:36 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) getpeername(r0, 0x0, &(0x7f0000007c00)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) 10:11:36 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) ioctl$KDDISABIO(r0, 0x4b37) listen(r1, 0x20000000) getpeername(r1, &(0x7f0000000040)=@vsock, &(0x7f00000000c0)=0x80) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 10:11:36 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x10000, &(0x7f0000000040), 0x4, r0, 0x2}) read(r0, 0x0, 0x2f) 10:11:36 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:36 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:36 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:36 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 704.132999][ C0] net_ratelimit: 16 callbacks suppressed [ 704.133008][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 704.144717][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:36 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:36 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, &(0x7f0000000140)=""/4096, 0x1000) read(r0, 0x0, 0xfffffffffffffded) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) 10:11:36 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r1 = accept$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) accept4$unix(r1, &(0x7f0000000380)=@abs, &(0x7f00000001c0)=0x6e, 0x800) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x1, 0xf7, &(0x7f00000000c0)="28a493c3fd8f37e9c183f433e924e29d9ec5f3dfc6887dbf015bd20ac4934eed9b5e702d28a01b01081795b23aa2837d580be1ad2aed11e286dc180384135c8f830c2d8ff22d703f65026b1d4e1a5d9ba218f6d9faf63c72774a7dffb3eba249e6578475b5061e79006f187531d6498a5beb052c9116e92cbf3582c1ef96ada7be942a2c28df88d416b92709bd9fdcec276c5b310b57fbc73d82d395bb6e85b96fcd781e82543f0ba6fb24c55b0e770d969669a2846daadeac3a21449ca34c6eceecba10dd802b5f26eea9a732ced4ded07492e43808d7560bf10108c08ac6f3939708792191efb6a43403e9e722d095272f3aeca0e9b0"}) accept$unix(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) getdents(r0, &(0x7f0000000080)=""/51, 0x33) 10:11:37 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:37 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x1) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x400, 0x9]) 10:11:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) fanotify_mark(r0, 0x10, 0x8000000, r1, &(0x7f00000000c0)='./bus/file0\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140), &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = open(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed, 0x0, 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r6 = socket$kcm(0x29, 0xfffffffffffe, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f000031aff8)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000001500)=0x4) ftruncate(r5, 0x4) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@remote}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) close(r6) ioctl$int_in(r2, 0x0, &(0x7f0000001980)=0x800) sendmsg$rds(r7, &(0x7f0000001c00)={&(0x7f0000000080), 0x10, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x12f, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000000)) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 10:11:37 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) r1 = msgget$private(0x0, 0x20) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/131) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0x3, 0x0, 0x10000, 0xfffffffffffffff7}) read(r0, 0x0, 0x2f) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x1d4, 0x31, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x90, 0x1, [{0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x5, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x1b, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x6, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0xa, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x7, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffffffff472b}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1e, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0x333}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x15, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x20, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x40004) [ 704.843226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 704.849662][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:37 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = dup(r0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x121) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x400000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7ffff, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0xf42f, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff83, 0xa, 0x0, 0x0, 0x0, 0x8906, 0xf0ffffffffffff}}}}}, &(0x7f0000000040)) sendto$inet6(r2, &(0x7f0000000200)="b6545764d197728d8d86ad9d5c6c4700aa30b1800cff9e32c8f48d2b219e35e1cfc1e9c2814caac344e03876fe28c37dba0e80f81c60ed2aa8728013e3c8b1df4b5e39c3c909d8d20dcebfb3dd35fedeaae3be6d43d554c106c3bb3e72259065a2d78a4600002b2ccbfb1f711e91b60fa880e64d96b5d350633c7d86fb689cbd1702a6eb8ea8b03d70367775bbf7925ebb29ea5e040d65ee77d7040824614e56ad4a1ef7c2a6e94427b19db4ed11570a4cb4e61ff0859a98be925547877060ab99e8be72bad4", 0xc6, 0x1, 0x0, 0x0) linkat(r1, &(0x7f0000000000)='./bus\x00', r2, &(0x7f00000000c0)='./bus\x00', 0x400) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000440)={0x6, {{0xa, 0x4e23, 0x8d, @loopback, 0x3}}, 0x0, 0x6, [{{0xa, 0x4e20, 0x9, @rand_addr="6985647a4b197cf727985d704c1ca8fd", 0xff}}, {{0xa, 0x4e24, 0xffffffffffffffff, @remote, 0x10000}}, {{0xa, 0x4e22, 0x80000001, @mcast1, 0x2}}, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}}, {{0xa, 0x4e24, 0x4, @local, 0xa11}}, {{0xa, 0x4e21, 0x0, @loopback, 0x9}}]}, 0x390) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000001c0)=0x2, 0xfffffffffffffeca) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x44) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 10:11:37 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:37 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="67384b3b257205e6a702d6a07a60f2daf62e") ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 705.082816][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.088666][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 705.094847][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.100653][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:37 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:37 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r2, 0x3, &(0x7f0000001300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0xf, 0x8d, r1, &(0x7f0000001340)="addce7f80dd6d1372067f111cf522cbb79964debaf7aa371d79f323adbd124f57a3cf7b4e4a8972a620f82a8e1ab6536196235f350a800ae93475161e5382cc2cfcc3838f9e3e1d701db2140b82dda43e11d3229e134c1db34088aa233259a6b17cd4feea6e8cd7d3afb23d75153eed34f9d9137a498bccd769df940ddbaf33b1e8383ee5d20697ebcb96511dca5b47766d8f44f12516892925d3f0591877b03a518308fbafa52990b6ab4c16a97b1629473b4feb8d33b2088c725fe1cf8f88566726c89a1250f65e4d5cc1aaf38421dd91cc15bf2485155b2835d09cc27ef41cfb59108e671b678d337557ab3572cc80d7dc1521a425c19e2c74c3eb63e96320d59019f64fc3bb18251c250d9c4d7ed04168ac9d2237fa1e06133d293a1e96afe777e55082ca70e1bef5e214b56aa0d97c4be4609c93d6bc0441167649ae9305cb33e2c5c1b3d33923716ae6a618947827c8efec0fd9b3c89b7ce63369df17a693e66dc235b15da63f8125cb1a9594eb8ca9f2dd7f1b3304720adf9bce092bf89723b047debf003ce4264bf2f7fe64e9f43e256b826d080e1e9e3dd2c5972f356adc798d46a382d818fe58aa0780ed6febbd8494205cd850d8159e348cb71bdaecf80bb9856924e59997b59b32216215a9b6c1c14c4963d3704666411df4c2066a7bbda3e82224af510acb9952a90821901cd00a36ccf8f734eca9c00bd95a60c5802802b90e4a49de44e96e5c86f60660067a0b117b41793a91b76e5544e4b6a24ebcea9874bf1392e4a7a47dd2fa427e71df40e3a97e6e66389c3094b6a081996b6b2a811642dd92fe002dc3d08dd3ff160f2a33d4bbdbdba074887bda637246a749cd59134bba37ac89eb663586a11b7291657c7ccec799533ed2ed59ed48aaf7f83d66e1c153fc9c98fa42116ab21bf658bac7d9a844a20a44af75c41b51bd87cdc3a99fdd15b02299c0b069c531089d6a8cc96466d360b3219b03be326a34eaa7f310f8308813158aa37379fc05a3f072554542409ec52d95814a75e35a4de8ac93c7e4353f79c15420ac656b3f85af7ce2ba714b5a734153d41102e359b499187fbf506dbf928103433b2202a19c057ba5367b16d6bc3e36a8ede4dd5d2d38a08c5c17d98ec5fc4cbaf277127682b80de16fbddfd74963816a1371fff59b8f00366c4b36a1d3bde3d1b36147785dae9d1f5052a47f5266e9640726f16374191c5eedeefcd0e7f0ae00c5fabaa4eae3346bf5433151dd74c5c3f9fcd57e28f0c3242fed6e8dbd7b67f43d9e3369848f5894c13dadd5951302d298e52735e60ebc1a7e9b12dbc61ce0eab81a3c431aad63cdad5d686882a665f39fc8106917665fa04e170a9654868e3c20a899bf0427c8170e53fca282e2a148ac9f62832964484114557f34c501109d8faf5fe79873443f00cff253cdb7a429b7cb9ac60bff3cb3964d495458cbfb6b650e72cf17393d38dc97b135c520b5900a46fcef99a7cef11e6b50a06e61c978da5ffa8713fef9fcd5cfeb49c53c4d6aafb48d8cf2306bf603945d30e2050cd4132ba380027b99370355427b9e8d7defab1dc20d0885b1561d9aac72c43bc535eb0d3d6169ee142dda3f5827729f5f0355baa16cf397cddce0a456c44675194396f43f43eff841a6dd9e5bc4b659bc0caaee2fdcc4ffb9e9ab141b30d39530c6a326c9264bf528ffff3a76ee7c3aa56cc52b9c82ea646abcd0f91790151c81dc2926692bdbb8cbdc2d0cdea3f983597b960df134b70c653f08dfa7e94f1bdcf36a07418e89822f002abc9a213f09a096519af11d6f5636fddeede5b286577854938d0ca363768bf617fd10aa177a570f19a768b7b9cf2c5e210d1fc45b5fc42909f65ca0e01c0d04336efa15de03f303eecdba386fc092b1e10aff651b296cf9d01ae4033c6f2326674efed08235e91de6f68558192afb58976114d4fc91d0b911bdbf6e12742ae7c1247158a0fae4b32ac85a6a9a0a7a7035a3be2e23cf5a418a68312424f1893d8ab08ba037c7ef3cb596e9dad2e03eade214403f829a2b6f6de2668d8b620f0a4c5f836da7bd0947fda48a3d3f684416eeec1b5edf2a4b7b578fc077761ed05000024af514dad08bc90e94922c9eecfbb99b8a9c2f61779709c96775c40f91366ca6b53cfc41fe75e8813d378d45acadab3d98604e2ff468a09dde1bbac313d45b37566858fc5b181ca3e62419c316ca1d2293652095a687b7a3667cef71d63aa22dbf92b6fca870c86c897615285d2159b2a3bf26fe9172b34ea542abb3ff9371d36ebd1cbf4314b57ae0f0026922c963b0a347ac7d914e2c59c59c915663c7e058a6da05b221db001ead5915e165495321d4dfca7a73cf13154f6e5983f7403020fd836a6139fa0607f5236480f78cd1e7e16db5349bf2585916fc567c273203248fdebd0089d68d2fff7f033cb82ca4e8c247a96cf2e4452b15f42b53961e4647038dfe3e3d912608ecc41f43fbb10456d6816a2e2e77700852848a6e45ca9a055040f5db6e228529963c757de94c4a87e788d23d18a19ca1a7892cb6359bd8121c049ae38cb9844d10b870158ff4cd62d76b74eac8843e85dfc1ecd59f43d6fbc69cf88a013c85a8e81d7944a0ef1a4a06feae83e0027809fb0308343877edf3e3d2c8c784e30db45c0498e2a1ce715785e5149503d6a1c21e44668e6f4ab6845abac2038cbae585017f5bcda494d4f02cf239d9eb3bd15cbf8d6512f5a8b84d37b2e3bd8e628ccd5dbf2efc45e85b3f8618acc75b0a14fa1b219297b76edbd0c863a39e5282f8ddb1302741c4cea318098c709dc9ab943c9e11f33e248951264173428e101dbcaf95bffe95c3cbc20475275d487fc7f9673d01c59881867180070e49596ad40e69e33574c90c27deda34e2eb114acc14eba7119e8488259bdde59f35db75164616eed6e170cd1477f370fb3ed66ee44954b496d740759ff71857ec4655669182d317fc60d9d148df6187e5fe70211b05fd2eac1d1a7b1d95cf8703409cf9d883b5317848a4e1d3b576542202bd303570ebc006d7bcc6fcf5c7cfeed16fad208a87f628078d587c6d49e98b50688b445e4c01e0f131f846b29492d3fed24aa3a85ad2c4a5c2345f5b5c0c5ea1852031a1221ff9632e8fc7bbb9fca2d7ffec1074f5ea1d8ab5512b1f8f1864e144ec7edcbe7a42868b09a51749f21f4ea268c9ba3195a3f3687777ab35f60bfdc64d3332fc1def43f5e603fcbf97df98874285dffe8aa192bd25536e52fdbc32e54bb33d156639a19c0b0f5c6eb8f1f374f7c7fc146aaa4e56b13d0e6e158efc38cfca416c0b1a3a778f135b8b816f297c6794fd2618c3dad30179f6dd99c21a64cce6a9e567a25aa6946b4e3fb28dc16ca2a634ac29a429f666b5958d585930693e867a2b4e6e2e7e30c9f5c17aff159f76b47291a4402c67a1946fdd3344c9a9f3eba65a59d30d96c13f6823d6e21551a510fd36697b2592211290c9834167eed4c2bd935ddb08de4a12434f2ed52636683de5fd36b8ec14ed012f419f0137dbc68de2933a40abe9f017af7a39da687dffc1f3ee3dd6002b2feea5444c2bf929ee4a1669bf0ab6e9012fc4e2e8e9c97c28d9f080ab4cdb89de314382c834a6e391577feb102d395a1bf12436c6914a85684490ee458d8b665aae2765eb398fbd108c049a265de872d002534fe1681d1c467c69d71c09a00e434117c0a2dea7a93460fc2a37de5c5c597309fddbe31b7548cb509d1adc6b56de734583129daf0c28c781ebcdc828b22bf2838b1c8e34a58f84ad69023fdefb92b8bd66bcb9c57483b00927288b9091f7a8acb7b9799a303b86cebe46babceedfa090f019d562367cbb0e2be2769590bfb6d227ccd3ee61b76887ff1b967ffab1ff88a7713182566be929a6040e65a301e2d8ff207070e50c4115d8cb31ce04666d6199058a42f3c25e1df5cf2f080871d27338283b0e33dd8694e93e64dcfb386c7bd1319a6ee9bdca0c107a1e6b6b5199fb303590348304164d5a08aae29a753b804c9ba7d6270445030b30dc18851b71e8198529dbf876cabd9a3e29b65fea8b38595bdf3e6a4f796887c6600f96124000afa03b65fa2f045f86cbda9b81bfc7d5f7aa1ed8673885e0b6c6cc6866662ad20e75060296d424dbec961c1ed9ef3a60a91a08b6f46fc0f0b8734cb76e0efe343ed5d6263d1970e621fb035e920bee764689d3ee6726e56c2650a151414a2dd0437ddb3214eca15737c00c7cfc5655442a80fd3d1cf82193c65d4a04b0b4b7c1039686c1091ade8addf62076173771b01c43fa2a64c0a2ab6fbbd8d89f33ce91487b1aebf804bf947770f4c1391b12abf6798019d3068b29e2b44733171d8babaaa667c0d72793c732d95623487c70db9a316d7bfb00e6a9879ab494d2a214a5ba270425d5f8f82330d131073873b0b624357e53ca328d347c94f512c78faf6e2133155b57444ffa13c4a1e9edc755c2d8e4472ef7419eff7fa40524b782d3fe9c98f49430abd97436444222c3148d90cd37f4b32322d8bef24a7e8efeec428a421137250d60d9a81cc2234afaaf26cee70d8d7f6a9e05ab1e00575fa80515ec423995592732777286f2cbf83fc49fa0f2e11ce76adc6e9d14ffe8be98fed9d050b8b5a2bca1959a95f63c35a769622e7dcd6c0b44c92405b35986b27dbfe4296985de3a65eb8f50e22a68b7a83fd4ceab1ded5158a312db76fe169580effd3a68ca57e1c14b8e7a35793431f51696331cdc38ce2cc05149cb413f09352b55600c0ab252784c16bf64b968b8fb4003adab4469f7e82416fdf26fe949791ae6f8de6f43b22140c76672d161e05b240b80afbb920f092140507422300d4b77c285f87918ca230d9ef8f81a869f99e303208a446f2b9885aed4a5025cd74e350c9715f713ed29edd062fd2bf0de697a249bd6214f916486d9617e7cd1b95d3abfd66f126377ae7efd8c76f8abd91f6fdb0d965101fc91bd133e49436b326e5aa69e2608f3b3bb9fa85b23211ec2add36f82fa697fba128d925e0de2ad9a4495ad90f453f39914c5af4600b6b818ce5c262aa34d7445514b57b5b1838bb9f1d610284c764ff23e09fa4aab836b12ebd63427bb660774d9e2df44d77f8de4e6ace7a9d9a3ad31d90b4b2f3febc75630a6eb61a4063517132ae7867b3d81f7fcc9d14c28c620520ca7b89e7ee73112548bb6ed726e7916b8ac6aaa2aba1488fdd6dfb627077c6926ace88329da458889bc535cc765e513db19b71683bcbf6931ae88bd479e6a352490a8efb5e609954afefb30dc844ade1fb7225d07e23eb86e18d845defb7c96d5b480ed261066bf80a30d88cab6416ac93d6e7d308c1d536bf36e77a68af542a86b2149729b763e46fbfb63c61acc16d6845eaaa5a1a00daef05da194218e8d1aec35af10212da8397b54849e71d35e372a60cd565816602dd44878644896ab77c8cddeb87d8bbb7e91870309695dbaceac971f3a94420411c5b684d06108b4267f8d654b03b5255e48db556735bee1fafd110e78b6ae350624d054e782309b02a27bd9a0d3f53a37c1987c5a161789051f833f8c958cb20241c62fb7da503a52372690235efc09af9419ec925fc5a92977e6a3d468d37ab3df2c6f6779b86d6fe1d92bdffc65aaa9355c3401b19652693b9eab4faf2f82a031f7d99010366c1ee72d952e69d289ec799977f170fa85b82605051f662da2374338f5f1d370747858266687c71ba7466f13f8bc05a69dc8474fd65bdf72b4734393015ada07f604b6f74bc6967f4aa43910bae8d7fc88974af33e5064d6f23a1e94b3050bca3e3ecb49e28e7385a9aa96d6f1d4d6922b81eca5294f218c9bc5732fed4dc0c538f1e418629627a38e042109184eac2c240d06db9b1", 0x104e, 0xffffffffffffffff, 0x0, 0x1, r0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000001140)="4b6e7b5f23135d008e1ded9664528588af7071223bffa16152fad0bfd1d194a7707ca404956efd77158a0ee501b1b41c8dd8b47f89e09bafbe9cfb96adec3a7aa3311b530df7c913c4f83925bd781e66a683d6d2c8df71047e9d4f2aa0855930f6a2eb2f7b8688836697185bf5f2a2d318bfe1fa133d2b6873de3903f919eb474a7269f9bbf14219f30d0659c90db885768445961e452748a8184fa321392fa11da1d8270c1741e671f6a480936ff188991484f32f2c060bc3fb08f7dea212290a93edf54eea75e9a9ff06be6f75b8e2f7eba1", 0xd3, 0x2, 0x0, 0x2, r0}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r1, &(0x7f0000001240)="827ad27040f3e055eee2250196b2f5f7aa8a784e173b482a17b3df0720c69f87cb2bf3ba1e763c3459d293e708859cea8ed9379d479a28851f6e60188f5c7c813f3ada911ad6be05705e03522ecd27cdd36077777fdbc75a0d7850", 0x5b, 0x1, 0x0, 0x0, r0}]) read(r0, 0x0, 0x223) 10:11:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x80800, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x8000) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000400)=0xb) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x6, 0x7, 0x5, 0x1, 0x9}, &(0x7f0000000340)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000380)={0x5, 0x208, 0x3, 0x1000, r5}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={r6, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x800, @local, 0x8}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x1, @loopback, 0x7}, @in6={0xa, 0x4e22, 0x100000001, @remote, 0x20}]}, &(0x7f00000002c0)=0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000013000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000008000d00d1c82e13048a92ea"], 0x3}}, 0x0) [ 705.322881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 705.328782][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:38 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:38 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:38 executing program 2: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000080)=r2, 0x12) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl(r1, 0x5, &(0x7f00000000c0)="0adc1f123c123f0000b0700140d9808fb9b7020817a774efe36c9e34b8a8508b") read(r0, 0x0, 0x2f) 10:11:38 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0xb) 10:11:38 executing program 2: syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) 10:11:38 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:38 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:38 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:38 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @broadcast}, {0x0, @local}, 0x40, {0x2, 0x4e24, @multicast2}, 'veth0_to_bond\x00'}) read(r0, 0x0, 0x223) 10:11:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7, 0x0, 0xffffffffffffff9c}, 0x24) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0, 0x3}, 0x20) 10:11:38 executing program 2: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000300)=@in={0x2, 0x4e22, @local}, 0x80, 0x0}, 0x8000) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="006ddb006f727920baed79a9863f8f31a06883c695cd0d191daa2e7bc108bd936fd488c0448ddae9f125a45a337d4bd4ebcd3614"], 0x34) 10:11:38 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:38 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffffffffffffffd0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x8}, &(0x7f0000000140)=0x8) 10:11:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) [ 706.679945][T30115] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 10:11:39 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:39 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:39 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 706.839206][T30115] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.856926][T30115] bridge0: port 2(bridge_slave_1) entered disabled state 10:11:39 executing program 2: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) read$eventfd(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr="bde971c0dc9073d22a9cb218f3548bd1"}}}, 0x98) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r1, r0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) 10:11:39 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:39 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101800, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') r4 = accept$packet(0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x101000, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x2000, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x271b}, {r1, 0x8000}, {r2}, {r3, 0x4145}, {r4, 0xd404}, {r5, 0x2000}, {r6, 0x2}], 0x7, 0x9) r7 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x80041) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r7, 0x0, 0x223) 10:11:39 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) 10:11:39 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:39 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$packet(r0, &(0x7f0000000040)=""/77, 0x4d, 0x40000000, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) ptrace$peekuser(0x3, r2, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) 10:11:40 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/76) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) 10:11:40 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:40 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:40 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:40 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:40 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:40 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x6000000000000000, 0x80, &(0x7f0000000d40)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x3, 0x310, [0x200008c0, 0x0, 0x0, 0x20000b10, 0x20000d08], 0x0, 0x0, &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x60, 0x88e7, 'eql\x00', 'bridge0\x00', 'veth1\x00', 'bond0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0xd0, 0xd0, 0x108, [@connlabel={'connlabel\x00', 0x8, {{0x101, 0x1}}}, @connlabel={'connlabel\x00', 0x8, {{0x1, 0x2}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@random="f7f291a40272", 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x108, 0x140, 0x178, [@limit={'limit\x00', 0x20}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}, [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}]}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x388) 10:11:40 executing program 2: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) 10:11:40 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000140)={0xfffffffffffffffd, 0x3, 0x100, 0xffffffffffffff00, [], [], [], 0x7fff, 0x2, 0x5, 0x973, "1e3db88403fe40966c6f121a75b5f941"}) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') read(r0, 0x0, 0x223) 10:11:40 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) 10:11:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000240)=""/163, 0xa3}], 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) 10:11:41 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:41 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:41 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 10:11:41 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:41 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TIOCCONS(r0, 0x5437) 10:11:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/tcp6\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1, 0x1f9) 10:11:41 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) read(r0, 0x0, 0x223) 10:11:41 executing program 2: 10:11:41 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 709.242826][ C0] net_ratelimit: 10 callbacks suppressed [ 709.242841][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 709.254401][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 709.260264][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 709.266080][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0xf) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xc0, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x2, @empty, 0x5}, @in6={0xa, 0x4e24, 0x7, @ipv4={[], [], @remote}, 0x1}, @in6={0xa, 0x4e22, 0x90, @dev={0xfe, 0x80, [], 0x23}, 0x4}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x5}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x7c, @dev={0xfe, 0x80, [], 0x13}, 0xe0f}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r2}, &(0x7f00000002c0)=0x8) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x103100, 0x0) 10:11:42 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:42 executing program 2: 10:11:42 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 709.482885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 709.488700][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:42 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:42 executing program 2: 10:11:42 executing program 2: 10:11:42 executing program 2: 10:11:42 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:42 executing program 2: 10:11:42 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:42 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000890a, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r2, 0x1}, 0x8) 10:11:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0xff, 0x4) 10:11:43 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:43 executing program 2: 10:11:43 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:43 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 710.362922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 710.368823][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:43 executing program 2: 10:11:43 executing program 2: 10:11:43 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:43 executing program 2: 10:11:43 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:43 executing program 2: 10:11:43 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x7) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000040)=0x1, 0x4) 10:11:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0xf4) read(r0, 0x0, 0x2f) 10:11:43 executing program 2: 10:11:43 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:43 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 711.322826][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.328679][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:46 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:46 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x47f3f9ebb302e699, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x802, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) read(r1, 0x0, 0x223) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f00000002c0)=0x7, 0x4) 10:11:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x0, 0x700, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}}, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000080)=0x364) 10:11:46 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:46 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:46 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x3ff, "1c5b90c43f23d04baec821503d1c9ff067a60cceb973fee44ce6c353dfcb25f3", 0x1, 0x1, 0x1, 0xffffff, 0x2010000, 0x4}) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x10000}, 0x8) 10:11:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/117) 10:11:46 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:46 executing program 2: sync() openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:11:46 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0xb) 10:11:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) readv(r1, &(0x7f0000000540), 0x10000000000002f4) [ 714.522936][ C0] net_ratelimit: 12 callbacks suppressed [ 714.528622][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 714.534416][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.482891][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.488717][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.494704][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.500464][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.722786][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 715.728600][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:49 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:49 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:49 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:49 executing program 2: socket$packet(0x11, 0x2000000000002, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x1c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10040, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 10:11:49 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) 10:11:49 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x100000000, 0x0, 0x1, 0xfffffffffffffff7}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x80000000, r2}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x223) [ 716.603552][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 716.609900][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:49 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x391000, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x53, "a39f5cb0cf2fb0414441af0701481765ce71bb280fbaaeba611e260f6f615a058f41dc426c8bc497482d64035af615d1207e485f84cd19f944fc64ae6873120e2269c680ecb9d257cf656fbe0e9beae3e2e009"}, &(0x7f0000000100)=0x77) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x40010, r0, 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) 10:11:49 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:49 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:49 executing program 2: r0 = socket$inet(0x2, 0x3, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff5a) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@remote}}, {{@in6}, 0x0, @in=@local}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) r1 = getpid() r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x800, 0x0) connect$rds(r3, &(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x2bd4b7b7dbdd73db) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 10:11:49 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) stat(0x0, &(0x7f0000003ec0)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x283, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000c00000/0x400000)=nil}) 10:11:52 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:52 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:52 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0xfffffffffffffe92) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x19) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x204000, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x200}, {r1, 0x20}, {r2, 0x404a}], 0x3, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={0x1}, 0x8) r3 = accept4$inet(r2, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000007d80)={'team0\x00', 0x0}) getsockname(r1, &(0x7f0000000480)=@isdn, &(0x7f0000000500)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x3}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000003c0)={r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x84) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f00000001c0)=""/99, &(0x7f0000000000)=0x63) setsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000007dc0)={@mcast1, r5}, 0x14) 10:11:52 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r1, 0x0, 0xfffffd2c) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000140)) 10:11:52 executing program 4: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0xfffffffffffffe0b, @rand_addr="ec04bcdec68d19266c3099a78072d83d", 0x8}}, 0xa1, 0xff, 0x57, 0x1}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={r0, 0x84, "1587e59b020e1224c752fdd888556be00d375d7279c089b2711853eefa4a771d03a09005dd42118869a6bf3384872573d7ff0b3113ac97b57894649e5e0e0ea3b75d6cc38261ea348329c77e6a379210effc11b3057597b052445990de6a0ef20d24ca48d716927f63078ebb7241ec60d5288063c716c96bc1e63b992c901d9ce7c42594"}, &(0x7f00000000c0)=0x8c) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") prctl$PR_GET_SECCOMP(0x15) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000002c0)={{0x5, 0x6}, {0x5, 0x50c}, 0x5, 0x2, 0x8}) read(r1, 0x0, 0x2f) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x400003e, 0x81, 0x3b}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x6, 0x6, 0xc34, 0x80000000, 0x6e, 0x5, 0x8, 0xc}}) [ 719.642851][ C0] net_ratelimit: 8 callbacks suppressed [ 719.642861][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 719.654303][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 719.660259][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 719.666100][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x7, 0x0) link(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0x10001, 0x4, 0x10000, 0x3, 0x5}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x100}, 0xfffffffffffffffe) sendto$inet6(r4, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000140)={0x35, 0x80000001, 0x7, 0x4}) ftruncate(r6, 0x7fff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendfile(r5, r6, 0x0, 0x8000dffffffe) 10:11:52 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:52 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 719.882804][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 719.888636][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:52 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x6, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x7, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x4e23, 0x0, @remote}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x5c) 10:11:52 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:53 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:53 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000000)={0x0, 0x0}) bind$unix(r0, &(0x7f0000003100)=@file={0x1, './file0\x00'}, 0x1e) r3 = dup3(r1, r0, 0x0) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040)=0x10000) 10:11:53 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:53 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:53 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) r2 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) setreuid(r2, r2) 10:11:53 executing program 0: mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/210) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x400001ff}, 0x0) sigaltstack(&(0x7f0000001000/0x1000)=nil, 0x0) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000)) 10:11:53 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) tkill(r1, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sync_file_range(r0, 0x81, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)="ff24df814dcaacc18bca956c55f123c02635645520e4c2c1fbd739000000000000", 0x1c) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x9) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendto$inet(r3, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @local}, 0x10) 10:11:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r2, 0xb3, "bfea17", "945285cbe722c9bb33f9c84885626a77addd764acc5d9da31b4ee89b35c56e8dbd1f7e8ea09e8a401c0c16e7aad45b38072d9acea63952553acb43c3b3b5db0f317991d2e52aa54dd6a2622db46ca4b9ce638df572f23886d261099c81b5fc8778aa23acecfd2a81b7572db54fe05be84803042948797e2157860c7a287b5c0a35ba25dc4740c48a18cd841a26b5c9dc071fd0e1a75960cabb00c384cabc2e8ad7a719cddf1ea517eb3ac7614a3d2d43ef10874e71e274501495b249f87600e51c82a7ede8cabd1e7f475c56999606ff8090420f6431e1b9998d2815f1dbd4e276f6c143eb4cf1af84fe83bd55fee2989b2b6948a199e5562ec6571c74bbceac"}}, 0x110) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000280)={0x20000000000000c2, &(0x7f0000000140)=[{}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 10:11:53 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:53 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 720.762872][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 720.768735][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) listen(r0, 0x50) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x3fffd, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) ptrace$peekuser(0x3, r2, 0x9) r3 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr="6cec75cdc223f50467573625ffb71dee"}}}, 0x0) 10:11:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = dup(r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)={0x2, 'M\\'}, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000080)=r3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@iv={0x18, 0x117, 0x3, 0x2, "94dd"}], 0x18}], 0x1, 0x0) 10:11:54 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:54 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1024e26, @dev={0xac, 0x14, 0x14, 0x1b}}, 0xfffffffffffffeda) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x13b37a21, 0xa140) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000380)={r2, 0x4}, &(0x7f00000003c0)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0xe4c, @mcast2, 0x9}, {0xa, 0x4e22, 0x9455, @mcast2}, 0xd20d, [0x5, 0x939, 0x7e5c, 0x9acf, 0x0, 0x800, 0x100000001, 0x1]}, 0x5c) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[], 0x349) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000100)={r0, r3}) 10:11:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f00004fd000), 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0x2ce9}, 0x8) write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x80000000, 0x0, 0x1, 0x5a, 0x1, 0x3, 0x7, 0x80, 0x24b, 0x38, 0x160, 0x8cc2, 0x3, 0x20, 0x1, 0x9, 0x1, 0x200000}, [{0x7474e557, 0x1, 0x9, 0xa, 0xffff, 0x8000, 0x80, 0x80000001}, {0x0, 0xffff, 0xffffffff00000000, 0x4, 0x0, 0xae6d, 0x1, 0xd2}], "4f20cf76cda2e55be5fdfdfe188410b44f01eebef39ee599a371756cdac3cb5d1f6e2be6a0e3f50319e7d102c6d946e3db925f329925727c2b59ac45cecd7c207e5a8191c77538b7ac22fff3e8a0ac07c044e7e5f41980b3472bf613f2a0ad34e388739e73602f11b3653c133695a5285b7c60bdd5a74ce1380f8d0da707a8947e9c21fbe26a3c630c1ced09c35624f1ef274f8bc2b7ea34fa344e97e58c96d83b24c485d49e9dc9bc3fd8281eeb671babc4f4c18e2f1d0a9032ae492856b7d28f80278b798ea41e91a4d55ddcef1641eb63d6564fdcd72801232c4672f6ff6392de8a214a713e4e36c02e7bc1488a", [[], []]}, 0x367) dup3(r0, r1, 0x0) 10:11:54 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:54 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x8, 0x185242) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x117, 0x4}}, 0x20) ioctl$BLKRRPART(r2, 0x125f, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x9}}, 0x18) read(r0, 0x0, 0x2f) 10:11:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x400000000000003f) flock(r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000080)={0x5, 0x3, 'client0\x00', 0xffffffff80000007, "ec33651dbd8f0e12", "ac5a0c9a5f99db558a30d9ef1bfff6e3fabc1c5f5800", 0x2, 0x1}) 10:11:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r6 = socket$kcm(0x29, 0x8000000005, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000400)="29ef2dd5c3290006cb5fcf300a13da3483bf54f5b8ae6505aeabcf0be187279b2b6cbfdf0f88ae87f29dfaf9841f18edff1f74c9f66cc2a0f035a82342b05788cca885be3bb7c5594a7db37c4d1a21c7b053bd109c40ae30b4dfcf647f57dd81e7", 0x61, 0xfffffffffffffffc) r8 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r7, &(0x7f0000000200)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x1}, r8) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[@ANYPTR64], 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000100)={r4, r5}) recvmmsg(r6, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x0, 0x0, 0x400000b7]}) 10:11:54 executing program 0: memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x8000004) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e21, @loopback}}) 10:11:54 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e23, 0x8b, @mcast1, 0x1f}}}, 0x84) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/unix\x00') sendfile(r0, r6, 0x0, 0x800000bf) rt_sigqueueinfo(0x0, 0x22, 0x0) 10:11:54 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 721.723360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.730297][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:54 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:54 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:54 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e23, 0x8b, @mcast1, 0x1f}}}, 0x84) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/unix\x00') sendfile(r0, r6, 0x0, 0x800000bf) rt_sigqueueinfo(0x0, 0x22, 0x0) 10:11:54 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:54 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:54 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") read(r0, 0x0, 0x2f) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000200)={0xba9, 0x4, 0x8, 0x9, "c47f347a2cea249a08b5c4a4fc8d3b4cc51e6262b9da5a231de14f630415033c"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r2, 0x80000000}, 0x8) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0x0, 0x5000, 0x0, 0x2}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) 10:11:55 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:55 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000005c0)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x1000000) umount2(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7fffffff, 0x6, 0x7, 0x2, 0x2, 0x2, 0x6, 0x5, 0x385, 0x38, 0x18f, 0x401, 0xd5e, 0x20, 0x2, 0xfffffffffffffff8, 0x7, 0x2}, [{0x5, 0xffffffffffffffdb, 0x3ff, 0x866, 0x7, 0xf8, 0x6, 0x1fffe00}], "a44ec56d3d3c"}, 0x5e) 10:11:55 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x20002, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000100)={r0}) clock_nanosleep(0x5, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000001c0)={0x7, 0x80, 0xfffffffffffff001}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x90001400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x21bf}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x80) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000380)="4b2b3b6ba3a39b85183dde0b2d25896dfd3b36483d765ac016ed6ec48f8d1e1799e4eb242a7eab947de14689b4d83086f42f878bd4cc8f846250367c097f065880a3c8161fbabc037ecd7c5d144c6289b990de96e388226b6f14e4432927460857fdb7371652ffec908a3e1b594e6e6cde519177830a40b20448420adef2b1a43ce37fabef130d7363e9fdb0bb9c9f7880e424a47938a6885906375dd2036391f6b29a6e55685e50029f49ebbeaa6407d9478fc2268f47b37b07a5dde58b69195b369b9f2afb001a2e7007e71396eb847d80fed978f2a82d4df2abce7d5f7ba13857edaa3bc56b94d8dc6cdd7d5a12121bff3ee385e5b19716f69113a24a9466647619b37ac258e0c5fe341661cc3c64752e26f78703fbe2daad056df05659fce4e8e2d5189d13e2114d9388f277c4963b44b0bb2744bb9bc84217bdf6f17e04fef35a7f1a1ec7048862b8b96d289b21df850a577b0e2dd1860c9ae410dafdbc87f240464a9bf67b5a9882767fd684c6e75f3a2d1f53acef43f3ef8b89285769f934d7c7207cd5b8ac5c8d3c3d97d58caf132a114a082abf44fc098883153724c6e418639f8df0e9dd1c07d3294cb641b789f38f9152e2a7a3ba21410a4eb18e982d9e5390e1942c62a85b77441889ff6246f733eb55d421464358bada5416882a19f9d2620654000edc6f6ce04fd47f67ddff02bbf16da478d4bfff6237315d8bbe8c4af45682b0f8c0031af13016b20515382114a428729bc1c2ea2ddca04e6684f9f2b56a3b9a0c0bd52c2f6fa5feeb872d36b9b7c92d8adfdeba35e6d634c50c117c7f1200a591bd4b35195747a58cbe1f7c8a9c0870ae6ee993dad1a8e64c1bf1aefa1694460f6517c80a9a48fbf8bd3b7ebca45c0c69c85d11049ded1dabd28365accae729d0897da364baaf4c9981bfac94af013809e3d897bb44ef552f782949cb070ba98dc0591dd4e69ef0b4a47bfbebc1f860fec16031fa6f550d3e6fc009e2913f7331e2d57b8f78bb90df2aa4225dd0939874a5b23a69f6bdc5e3e1f2e746f8c9380a44f314577acc966d4fbe720b098ead064539426f44e1cb31024b546b1a426f43c2c07daac73f0aa41b81b3da3c09feb89d9ee8a65b4971e9a0b5631c15bf56e2a2a9d68018611ece645e71e55e98898cb8da528cab10de56d93268fb254ba209f6bd5c1547f9f13303f0966131aa169b23d1ee80aebeab1ca672993ee37cce6ee3854b5f17351d15731378b1f6f86ef315d3081f63962ce4da92531bd0876d59fc514f89c83329615c8eabaa6766b06be8467395e2bfad40f400dacb5bb4899ac19c45c05765cfdb3acfa558f9d992b528a56af7d2a225e3f5ebc597e13d53f88037e0077f363d6c799cdf5d8e808266206d5fa3e7e1b5c5b7f1c59f338940f402e1f0d13f826dd80df23def71b80d3413cd77298f9e927b85b25d00fbf26bca0e18638f258598542491dca74dc1e5296504cbcc5b55d837436e11946e696ca61414e2012f5aabb8e0d4a0b8f136069a3a5d842b96a18c38c737c078395ea666fb24bba2612a77bb55dbed5a68cac477c9f6209446a584b0c04ee5ece4e2a2d69f3ec21e9660c3c154c7873e6755188f31cdb32800659ca20e66c9e3ed900579c9420377c46282b412104c0be5fe124d37b787365ffdf93672d80dbdaa0df76db71e60cadc884b6c5f708b77d3cc63f884547717683eb2ebcce8cabbec3fe8f7cdf0b0043fcd9ae31e74a76af4eea71c55923b7df59ce20ff0de49aa45b8510be3c4d21a52347b3685648575a06b9223cd999d34c195b1e50256be44fb1a46ce8e30a25dc8805337f7809e1ff95cf02d2b3f13d2e433c408142e746de6c0f3c7ffe0944387ec3502dc66cbe22807de11594e7ed9bef43d8dabc81a998229414a8d4fb5fef82d0edbf63943c906e765eb9f3d94ff832c5c7907aa47079cd80d873846a1e7d350499f31732821f6e29a3f7488e41d6708496477b8e39cfebd38bb38084ecb891e340100804c277b771cbe541ccfae88a3b85be67a0c72568808090b94cccf2f5131fd26093a3f67c0a91b3ea59e0e8888a4f1dff9af6ef4a13a477dd0b48f4c865325fe459ac0b45a33fecbd60f149b6cb17576719078f26247a36ea51c04b11ffe3e9d9b88b110f5243a51565ab4d900746f375f2fe12a290653c0135af5999170ecb4a7aeb71d8dd06e74f8287400ee634922bd17805d4c5471640b479209229f3ea5f48c03ee682614355f847c253db1edf3a105fe6b69fce0f3491fbe5b2bcd4b80e8b78c528f5e54180579459c8aa9938e543a3ebb72b2740403ccba841c80810be35194c98201728b0312fd3dab888d0e4308968b6289ae545789147813c12a391770d4d304577218bc33e56d1657fb38c1f8868622dd17e30fbe30d9ff5e0e37d4d5743c1a00d1ff2c281274b402f14b0bf61e210997495901c3356f4c4af9b8663816c40c316c1430f8b5f5e929628cc8288751bad4fc40ce4dd4771d20c386c27d757604af7f5bf5db7b01ab567116ab5933be0863db58b121373d246dd3dfc2d703ad8d218ba8382ac2334b7c3dd47f629af706859e5f24fd68429ad181bdca270b6e0469aa04a0883d2feb31901cee9fd1bc40740ad90779d7b0a17436517917a66afe8cc97a917de1530d10cfa13e2cb2a6985eec85ba6341c6f0c2a0142c74339bac9fddb317d6b1ed492495af80513855bd4a015320479ae972ae65f3d925309e6974e2fcd2304809b6a06cf253b1f2fe144fe5c2ceba2b127bf14e357b8aff6dec0e7d55770e415c357965b87edc714c49a13917a113fb63be543464732dec01bc490bd13e1f2a3eb8b1c1b19c0236d4fcc7697463fc82d429ea29e2d8f0a4ff6e7828190f7cd5772f79073e9235d3fe7e0dbb1327c50bcd33a87c7a51ebc0f36824a280f7c0aabfe1164ccc8e31cba4e8d49f5b5dc7774987717b836f4017f52b0450746f3998d4f41048f34d43196db5a8d74f20a53a5c2d29cf2ca59fafc7e07ac56033bc53d82410ab95815a41cf71524dddd4861772c4f9c57650f64a407707d2e5ae2e63302a3ae55d2cacd27fef1d04e8fbaadfd38d87c9893b8340a17cd17f60d79c6dd79a5fa107f9d891999a49682c1c908c74d6012055aadf03825c6967eb3b1457b6bb0f7fa36fba4672206013802131935dddb685490a13a6f34ebc2d3d2a9e50a7ec4b62776c0ab84f8a6a9d635b53973d00e3ead92171d53b2c6fe026a84869982b2423ebdb5e76c7dc855b38d73f56d5d63eb1db140771eefe4f0de73b3a3abfcf24f488706f0cca8ab17da3432d30f709dacfb205a5f6d7d554e9d05312bd6072e9fd44abf791d1ca28451fc144b0b6f5b8960a70c3b91d1d3403cd2b9ca6e5b29e407b85d95eb82abcd277816af97745f8f06e6c8407cef1fcfa850897b963ef01ce44d9ebee50c61566f7e31671fe01abf8af85381bd6e89a21a47138dacb051da4b8280d3f801586ab87daaf4c0f4bd0b11a1e9f438f2664c4f9aafee49984a6a35f815d869ce049ee214f7dda48785c23ac17a255f211fe132a56d31fdc827266059b4369633d50104d85c587c355523f3c9c9da822c46d677093a35c4ede6cd53e8a1470ea8a1131afe1d35ae58a795a9e75dacc62d559dbd346199c8c4f3cf730b88554bb903867aefb379ef813038968b55d71c8149682bcc26e6be8a8ca8b6cb53b79f39f3fc94cccd6e6e64b9cccd63450f6ff4af241549c97bbdf30fcf6284044c2372bd9482b923669d98e2f19916646cdc6dccd3dca382c2adb8e91c47fa03829f0a39157584d80e041d56b843d84f1e019551789d5307cea650e499f46f29fa6d17ec0ea4249ac9507f5d4494a57d8d420fadae7df442d87711ff76633755f6fb4e17341987fc171a8934a1df456cc9dfda3b32f9c50b3ad04825eba5059e922451016e70fd536a6ac644bfca289dbe4e535bdb1e8e9f29d2123f75938152d37436c2c9a83011f183350ffc1801e8e97cd53f1fd6dc3398a16f4091cc959bc4cecc3e8d9fd05d9777a42d48601435e79a278bd75924c4cde8b44767af6726eacfb33b2f9de0f5aac6bcc93a4adde8a76a5627f667195366e120b6e87a735aa18d285a52b1894f26c921ee1d80b2fb132c18738c18365ccf639fe83b88901731158775a7080f7682334b55d43ca249710ff448d61aa6a0ae1522ad2af303516c2ab419a364b19e032e01da5541009acbdc406828d15def09248a6354fcf23b591ffdccd5268493ea5cc691066d3b77d2e61b0dcf94a2f392560aa628ff7df441d64130aab12b3c1b1afb07b0e3f8874c00bdf32bb5948af02abca090425afc95cf96be0458b973602e9f2d51277d758bd5da730254481e5b99cdaf35e43dda52a781742134cea9e82037318b6346cafaf5eebd71330d024b6f9eca9da2144adc1b7f2880afa57d30f34dd83b217931b9170699a228d826ba88ad8a2d22ec24e7401b7942e4745ef1bf88b650dfc81010dee2b60787131317ebcce15129091836dc2f9efe7bcba04c5093d87eb6ee7723b25eefa1633ef6251ccff41c9f9059d8aaf3e0eda2e8051f12ceef6a9e4812b150c9e82efd2e3d5c063dd14cd9455cce4e89d4ead204c48ca2178c0c7b615f07b6ecc19978a95741a335d2e8f060be16dd2f2073446ca107afacc2ea014e8c05d727b9ddfdc8e9d26c0f850c100de2e453fcbc9740505deb7f78014535bfe84e957d452bf8ab91ea721e0580887d7470c9ed1e9c8a506f28e4de7f7e7b5107ba3ce2b46de63ff97a205612d680f1e8ef4c074d2e6e96676d11a45e94b64fd2992f675a370f4edf5f5332c37bbc745cb5efd9d031e24ad9a9ff88a9a22f1bd591bc8f3b402f281cf061002a82f66b9ceeed0d6055d7d4aa9abc191551655ee0a26e5806e813308998f097fb87e5edc936e6fd7e8d9258d9bce1d60a3efa7837c43ed2fa47f6f65ef63fc9a759ede8f99fe9ab2c99b83c54f68de45b51ffd46888d6c215fd113ed4282c9a43049c8292648f3c83d9a8ef3b8a8cf91a1f8b39d1be0b16054b29e51ab62a5cd7c5fd52aaa6b9f0db2e8f9bcc17e43654d60caad9cf34bc159df53f697275d2cd0e377108f83c62427bb09c95feb1131472bc00405a8bc7aca33f8df2b5338af76eec7f92ddfb6d8d7589224b14753806f6df084de9ad4f22f2b2f9869229b23490efa2d5922fed7bb2f082aefdee7083eae931f0228052dc3479f0a663779ece9deff97e8d1330a0601ed9003d27a28b9dc9c16682cd9a7ea362ea200a2986a6c765b03b0c2196e8a68d90718ce6d8d32cf11796d04d709fa755b913626a6bf32d1b1f6f87dfa825eecc45f81e8ee62a7721fdf9c872afb2a3acdb4430c37f45746b081b34b865b081b8c17b24bbf51909e313b654b37eedf7089f14484a7115a9bfe5128cb1ec03a8233f042d7519c7660e1013fb70921fc85cbcf7d245b5733e2b6979184909a6f792b9cc1b9a01df486f8688cfd50e0bcb2517de392493fc14d37a172d89ac3af10fd08592620674f8ad68757a05b53b8b3e72f4b7240a341704c1fca1d669e6735300d4f60a2b077a40c7e17b0f7519746e926d211bf4011c686da2ca0faeef5684e9298b41e71d49eee7a3ab6fd79e9690185330833a790c8fa2b0b28a0ab8ed49da4731be881b5d0738495a738bcde7f56cefd4cfaa448fa15dcd86aa2db271e23f5302fb041e1248f0a12c071ae84506d946591eb96910e2beece6d5e2f59a8857660049d8c0bad34bba899cbf5dd3c2426a7bccb77cf") ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000001380)={[{0x3, 0x1, 0x0, 0x7fff, 0x1, 0x6, 0xfffffffffffffffa, 0x2, 0xfffffffeffffffff, 0x5, 0xfffffffffffffbff, 0x400, 0x5}, {0x6, 0x4000000000000000, 0x5, 0x80000001, 0x6d9c, 0x7, 0x4, 0x800, 0x2, 0x101, 0x14e, 0x8, 0x9}, {0xfffffffffffffffa, 0x7, 0x0, 0x9, 0x2, 0x101, 0x3, 0x3, 0x5, 0x50, 0x0, 0x88df, 0x7}], 0x9}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000001400)=0x3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000001440)={0x79, 0x0, [0x4c, 0x7, 0xffffffff80000001, 0x20]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/mixer\x00', 0x10000, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = socket(0xa, 0x80800, 0x7) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x100) write$binfmt_misc(r0, &(0x7f0000001540)={'syz0', "6fa5fe053ce98ecec47f8636c6131fa0e47271a83ea480bc9b6afda826f438fc18a9930882edce08e60b70baa3af6da3b04e39a957ec81d5cb81f98c57429a52bf91d05e1ff3db5a220454a3733d641dabcad51ff6a1a00638b3203623efbbb4444787baaad9250c2ac91362a016f62b7e820507cbbc666abfb6d69c2e167e9fe51639d50d7c566c2567ffd9b746b8ffcd8dcd7159c13e4b1bf0380d5bf52ed9beb4e1b1f614799a884a6c6e592fbcbb53a41d022cbea1017a24d977eb458cb67ee6d5b485428aefb892f95cbd40546b5c053bb918c664fda7033cacbc0ad8693d1caa1e986ffaf6d8"}, 0xed) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000001640)) fsetxattr$security_capability(r0, &(0x7f0000001680)='security.capability\x00', &(0x7f00000016c0)=@v1={0x1000000, [{0x1, 0x6}]}, 0xc, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001700)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001800)=0xe8) getresgid(&(0x7f0000001840)=0x0, &(0x7f0000001880)=0x0, &(0x7f00000018c0)) write$FUSE_ENTRY(r0, &(0x7f0000001900)={0x90, 0x0, 0x4, {0x1, 0x0, 0x7, 0x8, 0x5, 0x7, {0x2, 0x3, 0xae, 0x9, 0x7, 0x3, 0x1, 0x1, 0x9, 0x1000, 0x2, r5, r6, 0x7, 0x3}}}, 0x90) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000001a00)=@add_del={0x2, &(0x7f00000019c0)='hsr0\x00'}) mount$fuse(0x0, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)='fuse\x00', 0x20000, &(0x7f0000001ac0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x80}}], [{@smackfshat={'smackfshat', 0x3d, 'nbd\x00'}}, {@subj_user={'subj_user', 0x3d, 'syz0'}}, {@obj_role={'obj_role', 0x3d, '\xaa'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfshat={'smackfshat', 0x3d, 'nodev'}}]}}) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000001c00)=0x3) fgetxattr(r3, &(0x7f0000001c40)=@known='trusted.overlay.nlink\x00', &(0x7f0000001c80)=""/42, 0x2a) 10:11:55 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:55 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}}) write(r0, &(0x7f0000000140)="150000000800000000000000c86b6525000010", 0x13) 10:11:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) membarrier(0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001300)={0x4000000003, @raw_data="2b934cb7bfeb06eb7225aa1333e58fa92a54401213d01276335efe72b9ea48fd413baca241af75e04f1a8df303d57a76357ac9a6f0032f53fbdfccf2c4edc23459a63462cbdf508efb98911bfdb35963d627c9ec142eaee71804742d8bd9abc08cf196beb73a68fb1a2db1dc45d97e9cb74d687f588d7ee418c2cb111476834fb2657635f8785cd9503ad16306fa8afe35279bd5d5dd4c48d15cb10a4dfe370050cbe9f8aed046509d175a71797211a47c8dba8c7a92187a7812158882b2bb97274dea8c3122e05c"}) 10:11:55 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:55 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:55 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r1}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="59763de0b849dc2324a6951d3fd53674d6dffdcfac08c957da9e9d0e72b78b46ca5601b0afc1e46a2b", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6764653d30303030303030303030307ca20926394359a1303030492c5d7365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 10:11:55 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) read(r0, 0x0, 0x2f) fcntl$getown(r0, 0x9) 10:11:55 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000009) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xf3f, 0x2) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/194, 0xc2, 0x6, 0x8000, 0x7ff, 0x99, 0x16d}, 0x120) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4, 0xc}]}, 0x24}}, 0x0) 10:11:55 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:55 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x4000040001) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x100000001) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080), 0x0, 0x0) 10:11:55 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:55 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [0x40000002, 0x1003]}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x84000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) 10:11:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x100000010, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8926, &(0x7f0000000000)={'bond0\x00\x00\x00\x00\x06\x00\x00\x01\x00', @ifru_settings={0x1, 0x8, @fr_pvc=0x0}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240), 0x8) 10:11:56 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:56 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) preadv(r0, &(0x7f0000000480), 0x0, 0x6bfc) 10:11:56 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:56 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000080)) read(r0, 0x0, 0x2f) 10:11:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:56 executing program 2: r0 = socket(0x0, 0xe, 0x20) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x2a4, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x140000000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x548e091e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd45b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30d8e636}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb24b}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7df000000000}]}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x73}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @multicast1}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7e, @remote, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x2a4}}, 0x20004804) r2 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@ng={0x4, 0x11, "05"}, 0x3, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a68b7887700000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 10:11:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x80001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x21000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000003c0)={{0x4, 0x3, 0x6, 0x5, 'syz1\x00', 0x8}, 0x6, 0x107, 0x4, r4, 0x5, 0x2, 'syz1\x00', &(0x7f0000000380)=[')$)security\x00', 'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', ':md5sum\x00', 'TIPC\x00', ']vboxnet0user/\x00'], 0x38, [], [0x2, 0x6, 0xffffffff, 0xe681]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000002c0)='-$+cgroup\x00') setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000240), 0x0) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000500)={0xffff, 0x5, 0x7}) syz_open_dev$sndctrl(&(0x7f0000000540)='/dev/snd/controlC#\x00', 0x7, 0x200002) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2100020}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x402, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) epoll_create1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000001c0)) dup3(r6, r1, 0x0) 10:11:56 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:56 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 724.269492][ T4251] binder: BINDER_SET_CONTEXT_MGR already set [ 724.289841][ T4251] binder: 4250:4251 ioctl 40046207 0 returned -16 [ 724.304734][ T4251] binder: 4250:4251 got transaction with invalid offset (0, min 0 max 24) or object. 10:11:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1a7df, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) ioctl(r0, 0xfff7ffffffffffc6, &(0x7f0000000040)) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x5, 0x12d}) [ 724.316251][ T4251] binder: 4250:4251 transaction failed 29201/-22, size 24-8 line 3241 [ 724.329610][ T4292] binder_alloc: binder_alloc_mmap_handler: 4250 20004000-20005000 already mapped failed -16 [ 724.344145][ T22] binder: undelivered TRANSACTION_ERROR: 29201 10:11:57 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x6, 0xff}, {0x3, 0x10000}, 0x1000, 0x1, 0x3f}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x200, 0x8000) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000240)={0x9a0000, 0x8, 0x6, [], &(0x7f0000000200)={0x9c090b, 0xa8, [], @string=&(0x7f00000001c0)=0x9e8}}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100ffe, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x6f, &(0x7f0000000040), &(0x7f0000000140)=0x4) fcntl$addseals(r0, 0x409, 0xf) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xb2, 0x0, 0x0, 0xfffffffffffffe20) 10:11:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0xcc) ioctl$NBD_CLEAR_QUE(r1, 0xab05) [ 724.622454][ T4479] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 10:11:57 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 724.699518][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 724.719471][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 724.758394][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.765637][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.780780][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.787997][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.837954][ T4479] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 724.864703][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 724.923303][ C0] net_ratelimit: 12 callbacks suppressed [ 724.923407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 724.923662][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 724.929565][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:11:57 executing program 2: socketpair$unix(0x1, 0x4000000000000002, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0xfffffffffffffe19) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0xfffffffffffffffe) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x16) [ 725.046366][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 725.052633][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:11:57 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @empty}, 0x10) r0 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="971b640a65ae9fead65d999f", 0xc, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="83cbad99560f46f14c2f20a580c02aeeedb234a3c3d0e9775504458b76280d5804c35b9478275a949d0a75f9ba64945879cb8cb99b86a5894836231f9fca1daa4a4a3e7bd1eab54a3274feb82d6bf595f65dbafed39ab05aa811a9f470811805c389f440924b1611d4bf4c9a577599745071a08525aadfd60ec3397f82e0edd94f9f011946e679367f05dc5cb910fcaaa874bc29b0b43a14d889359b3b191b4496c3b21e212fb31ba9e1b8ff4c4cee3e3746a0f1ae305e9decc882ecabb78ad55eecf91ffcbe3ab5737ad75dcd478651a5e5c3", 0xd3, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="942889d1347ff410124b8efd", 0xc}, {&(0x7f0000000100)="3e936f7c9b6df12ed76f8166105b913899b9a4f90bf8f5dae29760a5ade625d82f4c89d63310fdd14d47cc62722c4e9f18bedae35a2a7b16efb2a550ae82299ba651eb6a65c88b3535147813ef67f757305003a24d84ea3664448c06e517a88616c8dedaabbf224b8aa348e709e5e22601f918e8e4cfdb3192ebacf6c6b469dccf7e9bf607c5decaa5595a0a8f511701e47508868dee5a6e6b6c49f537b3f163a06bf1cafef9d2ce08d1ede031b9bd70984deb3c46afef19165dfa247426ef2b8e0ed6b1d77d780daf124de60a17dbe1b5d37c668afe12e2d58b", 0xda}, {&(0x7f0000000200)="be3dafb41c7da0facb9b65ebf499ec7fbfcce53751d33d14e12e3111917518012128c00beb54f312522563f2781e0332aca6fe2fd3b9d09869eff6ee3e23a9a7b352aef8ff313d01bb6e22c1af6aed9a801461ba76efb0342fc528a9e6fb582731cd21e166f6e2d2319fa79d571b59adbc87f100b97e83f48aff232d6ed3aaa20ad5ed31", 0x84}], 0x3, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 725.162868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 725.168762][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 725.282806][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 725.288709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 725.892827][ C0] protocol 88fb is buggy, dev hsr_slave_0 10:11:59 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:11:59 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:11:59 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:11:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f000039a000)}, 0xe) 10:11:59 executing program 0: r0 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="9ad0918f02f1c06f1d490188dca494ab583fe491b8b6ef48ca5bbc7070b3d3fbd2faa139f72772414194862a899c69e96be400cd02c79c4e35450d62593fd275fce57f3a33f236f5a6568086b946db00c200ae1bc04154e8583b67fa7a7fbba77b751b153d2e9689a10c87c1c9e89d7f053dc8d03a583d0a0fe807e2a98f62c4e442f32ee92098ed0e155e8076fbb0f2d871331aa1b95cf56a5a91a8da163c533aeabc7d9ab8e5b1414910add617c05bf0cf5fd22b1ef03a73867d5289904841f7e71a86bc84b9cd4e4e33b99ddf3dce66791b5e57f1c23bc588954da94b1f710a2e8dad128299942c16", 0xfffffffffffffe82, 0xfffffffffffffff9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x1) keyctl$read(0xb, r0, &(0x7f0000000000)=""/4, 0xfffffffffffffe39) 10:11:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000300)={0x0, 0x80, 0x3ff, {0x77359400}, 0x80}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0xb, &(0x7f0000000000)=']wlan1self\x00', 0xffffffffffffffff}, 0x30) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x9) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x2f1) 10:11:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000400)=""/68, &(0x7f0000000540)=0x44) setxattr$trusted_overlay_opaque(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x147, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000780)={0x0, 0x16, &(0x7f00000006c0)="87fc2711c6129998f2c41a7223669066ff851bd5b4b93504a1b2951926ad1fee8447d61a9cbb9cc4bfe6f0c2c303063b4a45d12892547af4f21666d46f32c5920e0f9072515979e70fcf557c9607aa4438507bf545bd2b56a56587a1bbe35ddab7b0fb51fcd68c91578a6640be8996155b2976cf8786f0978619728cd46a426908e75db008b278ad15c735b6c5818ec1f5cac5afa030e787f6c8db3587a9", {0xfffffffffffffff7, 0x4, 0x757b7f5f, 0x0, 0x2, 0x2, 0xd, 0x3}}) 10:12:00 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:00 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x101, 0x303883) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x8, {0x4}}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000100), 0x4) 10:12:00 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xffffffffffffff82, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xb3}], 0x1}}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000001b80)='./file0\x00', 0x96) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000001bc0)) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) fcntl$setflags(r0, 0x2, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) 10:12:00 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e000000120081aee4050cecdb4cb90425485e510befccd77f3e9cf0758ef9000600b0eba06ac400060012000000", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'bpq0\x00', 0x9600}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 10:12:00 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x80000000002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x40000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffff7f, &(0x7f0000000780)="da0373d9a376eefa62ced01d2ffd68ccfa44aa3d6f3418b39771f87d6d235bb8784f4207615de34a34213ac64759a809cf8bd0027c76ddacd76cd12d3759781a32d56be582a2baf3f5e6042029") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0x2100) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd0e782fd37a8ec0863e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c7604e245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707d71c3366af65da074ad23cade2cecfaf942b0b4dd95b0100000000000000d1e82cb0b679aa2aaf7e0d29a439dcc051718e77701ac5fdce60d3eb930e566722278144ed27b640c546372ad430cc0000000000"], 0xf8) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r3, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)}, 0x4000004) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000100)) 10:12:00 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 730.042839][ C0] net_ratelimit: 19 callbacks suppressed [ 730.042849][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 730.054387][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 730.060186][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 730.065987][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 730.282837][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 730.288659][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='\x00', 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x8800) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) utimensat(r2, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{}, {r3, r4/1000+30000}}, 0x100) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000140)=""/234) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000000040)=0x84) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) 10:12:02 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x8, 0x8001}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0xaf5) 10:12:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x200100, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000480)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @broadcast}, &(0x7f00000002c0)=0x80, 0x80000) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000300)=0x8, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) r4 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000200)={{0x9, 0x3, 0x6, 0x8001, 0xa5e9, 0x9e5b}, 0x0, 0x7, 0xfba9}) r5 = request_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='*\x00', 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000400)=""/56, 0x38) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x5c2) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000100)={0x81, 0x0, 0x80000000}) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) 10:12:02 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:03 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2200080, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f00000001c0)=@ethernet, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000340)=""/98, 0x62}], 0x2, &(0x7f00000003c0)=""/30, 0x1e}, 0x1000}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/42, 0x2a}], 0x1}, 0x664d1637}], 0x2, 0x100, &(0x7f0000000600)={0x77359400}) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(r1, r1, &(0x7f0000d83ff8), 0x2008000fffffffe) 10:12:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = dup2(r0, r0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x81, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000001c0)=0x6, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r0}) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000140)='cpuset\x00', 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000b67000), &(0x7f00007d0000)=0x2fd71482) 10:12:03 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:03 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:03 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0xff, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="d3abc7990d535c00000000000000040001f13c024664188994b521b73086d4d6", 0x20) 10:12:03 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 731.163420][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 731.169826][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 731.493199][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 731.499045][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:06 executing program 5: timer_create(0x0, 0x0, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:06 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r3, 0x75, &(0x7f00000000c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) preadv(r0, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x406, r1) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000180)) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x00\x00\x00!\x00', @ifru_mtu=0x7}) socket$isdn_base(0x22, 0x3, 0x0) 10:12:06 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x30000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x3, 0x1, 0x1}) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/245, &(0x7f0000000240)=0xf5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOFFLOAD(r2, 0x800454df, 0x713000) socketpair(0x3, 0x0, 0x22, &(0x7f0000000280)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x80002, 0x0) 10:12:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x1) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0x7d75, 0xb, 0x4, 0x80101040, {}, {0x0, 0xf, 0x7, 0x4, 0x7, 0x8, "2b4317e8"}, 0x1, 0x2, @offset=0x1, 0x4}) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername(r2, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x1) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='em0\x00', 0x4, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 10:12:06 executing program 5: timer_create(0x0, 0x0, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:06 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:06 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:06 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'veth1\x00', @ifru_map={0x1, 0x800, 0x2, 0x1d5f, 0x8, 0x3}}}) r1 = socket$kcm(0x10, 0x9, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="390000001400810000d175040f62b04a2b0aecce4c1960a99c40eb9373585806dbb7d553b4a400000000000000000000000000000000000000", 0x39}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x69, 0x22001) 10:12:06 executing program 5: timer_create(0x0, 0x0, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 10:12:06 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:06 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 735.322809][ C0] net_ratelimit: 16 callbacks suppressed [ 735.322819][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 735.334352][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:12:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r3, 0x75, &(0x7f00000000c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) preadv(r0, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x406, r1) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000180)) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x00\x00\x00!\x00', @ifru_mtu=0x7}) socket$isdn_base(0x22, 0x3, 0x0) 10:12:08 executing program 5: timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:08 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:08 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffff80000000, 0x80000) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0x6) syslog(0x3, &(0x7f0000000180)=""/171, 0xab) 10:12:08 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') write$nbd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="674466980100000002000100010000006e851f572855b48e1ea0b78b3e7a81c2d54b265dbc5547528def29d15018d88e871fa8ed531b749e0526285bcfda54b9656d6002d60c3153efa75414955b2fd0f6c9f9e2bbff3537a70c9d26f435138b4ecc00000000000000000000000000"], 0x1) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffe3ed, 0x40) write$nbd(r1, &(0x7f0000000180)={0x6000000, 0x0, 0x0, 0x4, 0x7, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406a3ea21ad8514d024cacb80e3ba56"}, 0x68) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000200)=""/4096) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x0, 0x1, [0x3392131f, 0x8, 0x0, 0x4570, 0x100, 0x8, 0x7, 0xffffffff]}) 10:12:08 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='mountstats\x00') getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xdc5, 0x80000001}, &(0x7f0000001280)=0x18) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(r1, 0x0, 0x90a3d078) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x80000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x780001ff, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in=@remote}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xfe95) fsetxattr$system_posix_acl(r2, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="9d4706ad76efce5df2c73b3072897c7233900007bf109e77"], 0x1, 0x1) clone(0x4000, &(0x7f0000000100)="f1", 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r3, 0xe}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f00000001c0)=0x10008, 0x12) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 735.643381][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 735.649712][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:08 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:08 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @local, 'bond0\x00'}}, 0x1e) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8937, &(0x7f0000000040)={'bond0\x00', r4}) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev, 'veth1_to_hsr\x00'}}, 0x1e) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000200)={0xe, 0x6, 0x100, 0x7, 0xc6, "8519c48acd62a674e89bb74373ffc1defc7190d85ee51848a84fe03bcf0e4c281dd6723dc657c0e6240965045306498b51f22fa93af7824570de8f79bda7794a11dbee624f24dad734995c8513aa230c80a49d0c825ee9cffbe600e5de1fa5a5cd6eed8597c3a3fc48973ae81336a26dfc95029347047e3c9c1d2cf01f9b13f63cef56aff5ab331d1ce93d850dc94d9f2336d87553168e68d1a6d1369047488a9da40d3a8d2502c4a8789746391b66621472045e8981e8df00c7743784f6c55c05b926b4f177"}, 0xd2) 10:12:08 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:08 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:08 executing program 2: r0 = socket$packet(0x11, 0x2000000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x2, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}, {0x2}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) sendmmsg(r3, &(0x7f0000000240), 0x5c3, 0x0) flock(r3, 0xe) [ 736.283787][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 736.290018][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 736.296949][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 736.303235][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:12:09 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 736.522800][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 736.528637][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:11 executing program 5: timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x301800, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x3f, 0x8, 0x38}) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) close(r2) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x10200000006}]}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x3) 10:12:11 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:11 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x6000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/4096) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000001180)=ANY=[@ANYBLOB="000000f460000000"]) fcntl$addseals(r0, 0x409, 0x8) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, &(0x7f00000000c0)=ANY=[@ANYRESHEX]) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000001340)={&(0x7f0000ffd000/0x1000)=nil, 0x4, 0xfffffffffffffffe, 0x18, &(0x7f0000ffd000/0x3000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x0, @mcast2}]}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="0200000004edda3b0808c337dd63c9dccde63f5446ee7cff5ccb345f2acbb1b2a8bcbb6f068c3df395d419912e43577fc7e30000000000000000000000000000"], 0x3c}}, 0x0) syz_open_dev$adsp(0x0, 0xffffffffffffffff, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6(0xa, 0x40000080806, 0x0) io_setup(0xffffffffffff0000, 0x0) pipe(0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) io_getevents(0x0, 0x0, 0x1, &(0x7f0000000240)=[{}], &(0x7f0000000280)={0x0, 0x989680}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x20000000) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @ipv4={[], [], @empty}, 0x80000001}, 0x1c) syz_open_dev$binder(&(0x7f0000001240)='/dev/binder#\x00', 0x0, 0x80000006) r4 = socket$inet6(0xa, 0x6, 0x0) mq_open(&(0x7f00000000c0)='bdev\\\x00', 0x40, 0x40, &(0x7f0000000100)={0x9, 0xfff, 0x0, 0x100, 0x6, 0x3, 0xb555, 0x3}) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r3, 0x0, &(0x7f0000000000), 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0xea010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 10:12:11 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:11 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000440)=0x3) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x4) prctl$PR_CAPBSET_READ(0x17, 0x0) fremovexattr(r3, &(0x7f0000000580)=@known='trusted.overlay.impure\x00') unshare(0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000005c0)=ANY=[]) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = semget$private(0x0, 0x8, 0x0) semctl$GETPID(r6, 0x0, 0xb, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) r9 = socket$inet6(0xa, 0x803, 0x2e) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f00000002c0)={@remote, 0x23, r8}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000003c0)={@remote, r8}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x17}, r8}, 0x14) [ 738.687866][ T26] kauditd_printk_skb: 293 callbacks suppressed [ 738.687882][ T26] audit: type=1326 audit(1553681531.303:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7055 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45b06a code=0x0 10:12:11 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:11 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:11 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x0, 0x18}, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x84002, 0x60) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x80000080045005, &(0x7f0000000100)) 10:12:11 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:11 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450dc4012971d300912e450f34c4627d597f8ba1c4e299370d4d000000676874343418d60fb11d0039804167640f71f645c29004f28019d70000c4423db93000d45ec31e0ff7") 10:12:11 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 739.319391][ T26] audit: type=1326 audit(1553681531.933:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7055 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45b06a code=0x0 [ 740.442852][ C0] net_ratelimit: 14 callbacks suppressed [ 740.442860][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 740.454345][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 740.460172][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 740.466040][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 740.682813][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 740.688607][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:14 executing program 5: timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:14 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x1001, @ipv4=@multicast1=0xfeff0000}]}]}, 0x24}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e22, @multicast1}], 0x10) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0x0, 0x5a0, {0x53, 0x8, 0xe536, {0x7fffffff, 0x7ff}, {0x7, 0x80000000}, @cond=[{0x1000, 0x8442, 0x9, 0x80000000, 0x7000000000000, 0xff}, {0x6, 0x6332, 0x0, 0x10001, 0xb00, 0x7}]}, {0x57, 0x6, 0x80000000, {0x100, 0x1ff}, {0x100000001, 0x8}, @ramp={0x8, 0xb3, {0x7fff, 0x100000001, 0x7f, 0x6}}}}) 10:12:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x7bfffffc, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/19) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x10000, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000180)={'bridge_slave_0\x00', 0x4}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@mcast2, 0x36, r7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r8 = dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000440)) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r9, &(0x7f0000000180), 0x1000000000000067, 0x0) fcntl$dupfd(r6, 0x0, r6) r10 = semget$private(0x0, 0x2, 0x404) semtimedop(r10, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r10, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) accept4$unix(r9, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x4800) 10:12:14 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:14 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x0, 0x240100) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000300)) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x800) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x140, 0x2}, 0xffffffffffffffd1) r2 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x0, 0x218000) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000380)={0x8001, 0x2, "765a66c4873c44e715ce1a32458a8e99e9ce5b402e8781518f2e4b348b9a7f9f", 0x9, 0xffffffffffffac57, 0x80000001, 0x7fffffff}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000280)={{0x1f, 0x1}, 0x10}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r3, 0x62, "ee530f153b41cbedddbfabd6bd2f2f901f19309debf6f4f9c6291c8f568d92a680da8fab30c8d044aad280e693eb9be0b160fb56e9fd3a9db4c870513614fabe47bd716d10d133f8690493996607efa464b07cd39dd74205483d84a43c1edc9ea86b"}, &(0x7f0000000200)=0x6a) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) [ 741.562840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 741.568654][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 741.617053][ T7732] openvswitch: netlink: Key type 4097 is out of range max 29 [ 741.662227][ T7774] openvswitch: netlink: Key type 4097 is out of range max 29 10:12:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x15555555555555b5, 0x0, 0x0, 0x8a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000005405000000000000d4040000d4040000d404000068020000b4060000b4060000b4060000b4060000b4060000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000108000000ac14140a000000000000000000000000fe8000000000000000000000000000bbc1ff0064ff01000000000000000000000000000136fe88b82881d7997c63b7cfbb1228beff0000ffff000000ff000000ffffff0000000000000000ff00000000ffffff0065727370616e3000000000000000000073797a5f74756e0000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000ff000000000000000000000000000000005c00000410000000000000000000000000000000ec0034010000000000000000000000000000000000000000000000002400686c00000000000000000000000000000000000000000000000000000000030100004800534e415400000000000000000000000000000000000000000000000000010100000000000000000000000000ffff00000000ffffffff0000000000000000000000004e20020052b5c73b335fe593d65202cec010310dfe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000626f6e6430000000000000000000000062617461647630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec00340100000000000000000035a43cf01d1d5496047048bc99c4f90000000000000000000000"], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 10:12:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") syz_emit_ethernet(0x300b22, &(0x7f0000000080)={@local, @empty, [], {@arp={0x4305, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @dev, @dev}}}}, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000040)='\x00', 0x1, 0x2) 10:12:14 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:14 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0xffffffffffffff95) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x2d3d10be, 0x40) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}, 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r3, 0x0, 0x1}) 10:12:14 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setns(r0, 0x60000000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x880, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, 0x101, 0x0, 0xa48f, 0x1000, 0x1}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={r2, 0xbd, "fca37efe0efcdcc29c993e7da859a24321fe8bc2093f81920a441d8d461addf2a97875df544b1269d99d3d3c6700b8978439778d4e80d812252f430dd7dde641ed7f4491ee73ab57868eb9f11488ce7e0e931cd32183fe3cbb1c54a517e035ae132607906b395a34d2776076d105f5c138917515a9581e9af7be9a3764bf2533bb8d57ffb444d4ebbd273694dbe5dfe089b5e546b014233b299ea2fbb64c3f33af69ff714d69a21995e5171a85462c39afcd4f16aa5b09061bfcd02325"}, &(0x7f0000000180)=0xc5) r3 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') 10:12:17 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") socket$inet(0x10, 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x7a34d2d40b2a6957, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 10:12:17 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:17 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$RTC_AIE_OFF(r1, 0x7002) 10:12:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x7bfffffc, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/19) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x10000, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000180)={'bridge_slave_0\x00', 0x4}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@mcast2, 0x36, r7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r8 = dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000440)) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r9, &(0x7f0000000180), 0x1000000000000067, 0x0) fcntl$dupfd(r6, 0x0, r6) r10 = semget$private(0x0, 0x2, 0x404) semtimedop(r10, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r10, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) accept4$unix(r9, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x4800) 10:12:17 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) close(r0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x6, 0x4) 10:12:17 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x620}], 0x1}}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000140)="f1ff434c1450ecdd7972ab4f304d8e3f7bbc604083e4da7b2559e5e1b50c33c35456874a4cd5bacf8545a811226501a439a1ea20f94f27982f8de3fb025f614520c3bdd6b6eb7926a9f10914fddde9c8ea3abd849966309414e99278e68bf9bf8cb2e133e2ff0984540007d21120376f26c7d95b477c3ef819af2893a32b1e42d6", 0x81) 10:12:17 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:17 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:17 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 745.722874][ C0] net_ratelimit: 18 callbacks suppressed [ 745.722884][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 745.734451][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 746.042903][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 746.048711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 746.682811][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 746.688614][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 746.694497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 746.700245][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 746.922858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 746.928665][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:20 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:20 executing program 2: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000080)={0x469f, 0x4, 0x81, 0x94, &(0x7f00000001c0)=[{}, {}, {}, {}]}) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10013, 0xffffffffffffffff, 0x0) 10:12:20 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:20 executing program 4: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000200)={0x102c, 0x7fff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000500)='./file0\x00', 0x400000, 0x48) getuid() stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) fstat(r1, &(0x7f0000000600)) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000840)=0xe8) getegid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x90) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) readahead(r0, 0x3, 0x5) set_tid_address(&(0x7f0000000400)) r3 = socket(0xa, 0x5, 0x0) r4 = getpgrp(0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000a80)=0x1) bind(r1, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'sit0\x00'}}, 0x80) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x10000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x3, 0x325, 0x63f}}, 0x28) sendto$unix(r5, &(0x7f0000000b00)="9517fa4bcacf9d9a4de35df6c143bf5eac738b8e7d0dd06309aaed706a63edcb6d0630e0c3d8", 0x26, 0x1, 0x0, 0x0) r6 = dup2(r3, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r6, 0x0, 0x2, &(0x7f0000000440)='!\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0x50, &(0x7f0000000880)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r6, 0x0, 0xffffffffffffff0a, &(0x7f00000006c0)=' \xde\fz\xeb\x88\x9b\x16\xe0|X\xe0I\n\x9c\xd44\xfa\'7\xd1\xf9\xde*q>K\x91G\x04\xab\x1bWsN\b\x90F\x06o\xce\xfd\xfbq\xed\x88@\x11', r7}, 0x412) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r4, r6, 0x0, 0x4, &(0x7f00000001c0)='lo(\x00', r9}, 0x30) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x4, {0x2, 0x4e24}, {0x2, 0x4e22, @dev}, {0x2, 0x4e23, @multicast2}, 0x145, 0xfffffffffffffffc, 0xb0e8, 0x8000, 0x1, 0x0, 0x0, 0x841}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x15) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x200, 0x4) capset(&(0x7f0000000300)={0x20080522, r8}, &(0x7f0000000340)={0x31e6, 0x1ff, 0x100, 0x1, 0x1, 0x6}) 10:12:20 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:20 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x7bfffffc, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/19) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x10000, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000180)={'bridge_slave_0\x00', 0x4}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@mcast2, 0x36, r7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r8 = dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000440)) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r9, &(0x7f0000000180), 0x1000000000000067, 0x0) fcntl$dupfd(r6, 0x0, r6) r10 = semget$private(0x0, 0x2, 0x404) semtimedop(r10, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r10, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) accept4$unix(r9, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x4800) 10:12:20 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x27}, 0x28, 0x2) socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x20000) connect$pppoe(r3, &(0x7f0000000280)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'gre0\x00'}}, 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x13, &(0x7f0000000040)={@empty}, 0x20) 10:12:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x20, 0x8, 0x7, 0x800000000000000, 0xffffffffffffff9c}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000280), 0x0}, 0x18) 10:12:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bond0\x00'}) 10:12:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@remote}}, {{@in6}, 0x0, @in=@local}}, 0xe8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) setsockopt$inet_mreqn(r1, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 10:12:20 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:20 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:23 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:23 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:23 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:23 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x4}, &(0x7f0000000040)={0x0, r2+30000000}, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000080)={0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}]}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0xffffffffffffff35}], 0x1, 0x0) 10:12:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x3, 0x1ff}]}, 0xc, 0x3) r2 = eventfd(0x0) dup2(r2, r1) 10:12:23 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x7bfffffc, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/19) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x10000, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000180)={'bridge_slave_0\x00', 0x4}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@mcast2, 0x36, r7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r8 = dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000440)) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r9, &(0x7f0000000180), 0x1000000000000067, 0x0) fcntl$dupfd(r6, 0x0, r6) r10 = semget$private(0x0, 0x2, 0x404) semtimedop(r10, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r10, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) accept4$unix(r9, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x4800) [ 750.842790][ C0] net_ratelimit: 14 callbacks suppressed [ 750.842799][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.854409][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 750.860257][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.866090][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:12:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3, 0x0, 0x4}, 0x2c) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x7cdaba0449cf50c2, r1, 0x100, 0x70bd2a, 0x2, {}, [@TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1e71}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45}]}]}, @TIPC_NLA_NET={0x0, 0x7, [@TIPC_NLA_NET_NODEID={0x0, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x23}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0x39}, @TIPC_NLA_NET_ID={0x0, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x100}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0xa0}, @TIPC_NLA_NET_ID={0x0, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x2f}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000894}, 0x5) 10:12:23 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:23 executing program 2: r0 = socket$inet(0x2, 0x80802, 0xa) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x4e401) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x31) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0, 0x3ba}}, {{&(0x7f00000035c0)=@in, 0x80, 0x0, 0x0, 0x0, 0xfffffcb7}}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x50) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x80, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4) [ 751.082802][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 751.088650][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:23 executing program 2: syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x7ff, 0x1ffffffffe) epoll_create(0x9) r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$video4linux(0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) sendto$packet(r0, &(0x7f0000000240)="45e416ea1b226e5bfc74a3e3bc3efe7946733c39b2ab94c51d76bc8ba77d23e8aa76ed69b82cb760f7ce595c7577bd9cf967bb9a84eb1bb721ab30cff3c1823eda629180ce6e37f372a93a861b99a4236453b1e11877f0b6115431ff6b8cabbf263eb58e3165be306abf33da129825e690c4ea747fd27f4b6512958e79add29922b3caf7d7f3f109066c15dd67627f70a8d3217861c5b0bcd3836e011db097ababf8", 0xa2, 0x4, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x8, @rand_addr="c353def8720bb4cde4fe0b59b0378bd2", 0x8}, {0xa, 0x4e20, 0x3, @ipv4={[], [], @rand_addr=0x1ff}, 0x30000000000}, 0x80000000, [0x90000000000, 0x9, 0xffffffffffffffff, 0x2, 0xfc25, 0x3, 0x8, 0x7fffffff]}, 0x5c) 10:12:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000054000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000005c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) fsync(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000002c0)={0x7, {0x0, 0xe40, 0x0, 0x7f80}, {0x81, 0x2594247a, 0xfffffffffffffcd8, 0x12f}, {0x2}}) rt_sigsuspend(0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x1, 0x6, @value=0x3}) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000280)={0x800, 0x0, 0x20, 0x5, 0x11, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4bf, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 10:12:23 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 751.963897][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 751.969690][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 752.292801][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 752.298699][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:26 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:26 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:26 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:26 executing program 2: syz_emit_ethernet(0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa07aaaaaa0d86dd6000000000000000000000000000aaff0200000000000000000000000000010000000000000000000000000000000300004e2300004e230000000000000000000000000000000000000064ce26f59c30a6f0c503fc10c0a9930f1b3c0234adfb358705c999d71ff9a9d109b867170a8ce1c062b47bac885fb790478bcf0e8993eea8f67d860f3e0a8595984a6b77ff8da3208a22423805bb27190a9db49515b84fbd5d5de47c21f9f259df2946e9440b27ba7a144b7a5e1e5eecf347452448bbfb088957a02db4a984d3b5bd1cc5d87dd1d392baa0eea3369f7216ee"], &(0x7f0000000340)={0x0, 0x2, [0x851, 0xac3, 0x77a, 0x843]}) 10:12:26 executing program 0: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000000)=0x8001, 0x4) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{}], 0xa, "a92734fd9f17e32489fbaf20fd82feb9510263e709bf621c1b16de1bc6c4e2c3e6c0761bfa79b284d2413746bd8b5d1c05f8636fdd81ced6132f34f62fba51a9dc7328f75efd9485763f6a2ef0568735b1bc8da10a79cf69d1e40f49a656ff536f4f922dfcfd3658dfe457e416a465b8904b7ae5d8613a3d927f3907b48599c9c947284c21d010865ad900e063b950255cfa1d953eeacad731092c2b161d95ebafe31b3c14731cd7da885738d71bb227e7f09bfba8949b52ef60df73654b4adb4b4828e9e65a82dbf05531db5210391448e6bdb56891b7f5cd6750db5aa147729b84d3dca91bbec1f98ba9e36e107466e23189391cbc6b432a49dbe9d5ef2e3d69d416792df09c4b53b2ee8c3e1138f9ba0ea412a08bc85a521832b92f90e2cf31770dcbb05c088a62eaf6641ef189d63768e56173c8e53a56736425590ce638accf00cfe12565d7f0393275b245a8471fa831bef1020bdbc41cd7a2dc26fb2cf226025734874905215ac9aaaa762b877a65cf35bd5c322a451aa76fbc657e9cf73553b30202d21dfff4c1481fef1acdfd50817ff9eab8a274121888f70e2ff99e171028d4bb83113d64358b85dbbe6f32f8a7562486173f8b28382fd67688df148eba9c9ca399560ccd458d3b4b67cffb92760c5d46838758cfdb3d275fc617c237f10fdd5c32ce78b0c17284ac84b5a8580d1195a9a0afd615cd172cf4bb3463f1a16aa842c0c1a5502c2fb8541c3bab7bd55e0cceaf60c4adaaf78894579f81734b0d688e2907e16434fd3d6850ea967b3027f64518dd647e6cb49e944fc04be9975a98b481e1aad8c7c50ce78baf4113644896b144855a624e5aee4207516e54a5d0d6d42795d6743cd524dadf4c2f560e0b1697a3651cff75906f8d391148f181caae6fe1046c7c6065fb198184945ba53035d1d8e54d34eaf1027199f6412548e07d8e6f2ee2de4009df7f44e1b62cb91ba2a42554f54caddbe2852f2dbec526a4545adef724e30d4fd43b2f182a8f7392fdd7e02cd645d4f913d514301624de97dd6ecdde6059af3ef677842212dfcd2ffaa73363d7a5dbd8901a973399c3942184b2807b382e4da432de1ba225ffed49ff4395b02284c4917a02306783d365bbb98faa9fb6f589fc08c1a8a0853e28b49f1f84f76f313f8f9f84daec6e6a57da43b50612680d61dbc512fa31f1d522b31704f8ab2a86c19cb53b25f484588d913932fc973849ef8c6c273bc2601367455c9f2f7aad082e6c6507aa11c43c21be671f22055013649382f963707a2e52f49293aa3777d0a2ba71e1522e54942a86569ba9c91f7fa99d37abb9b99e73e43ae38869344bb9801c2fdbab3707b883eea2eba946afbff757510d0ca9938efae30186852311cc53cab452d7274e7e427695cff5e020988df4e92da3118198a3d882951141f079e2a74d2671223a2208a1ea7db971c80c3160b34e89ca2c4119b9a89cf20ca4715d241bbbbe3031e09b8aec989aa27d6812ffdce2d22bfafae0c3023c16026f9232b05cced96bd7764d0611d1eefda730a4c43b233a82457c7bed83e365dd2736248ecf80475e239340caf6d8c69dfc56b57af1d176d07059b69960e893c045e2407720c3c6bc36ac20cfd485a610dee1066bd4b6f1418cf564180380fc8683bcc80327d1b9af591188eaa8137555103f95aea2fd909341b8ddc0389a21042c6eda98df3ffc270e4444ba0f0a1d40a9888fa5f70f28db8d16c399854551c645244f66e48b1f559a1458a953e28bf1a072324ee436d76c82f4ae78486db542140b8a90658323e437ca782166f2c4f3203182c1269107274ff33daa450fd1aebd75e813e5e37b488f52e66d14869316efb1c031604bd4e9bfa5739861cdc471e7516125d5f113e84fd991bd31cf1a775b1fd12928e0f1eb4aa5a647ae4535c5a2820834dfd257d445d99d00a0045f9d0b75da576ceb236d5d11dc3f0e8c88e821c0e8307c2139faa4d5156f280a884ab6cedf4939c9634bfa5f61bfef587c15421e70a6f0afa260abe4cfa7ce0a936494e5978d152203ab847bc5a0eea0bf9fdbd2dc4be9c7f215eccf4a16f23432594d1bfb46bf1a025d3a768aa0593e85ca49d7f4f4ada221ec17afd42bb8a84ba1d9aab8d25f47fc9983ec08eb3dfd1a02c1422ca43036642c01ad7b0414f137d5c1bea8c23b1e3cc2571c045ba9d02610ada04eb29dd2c80fdfd2e1e096ef55816eb4cc3a20f28c0ed68a36e7f499aaa4e3427c758437722267021b086856ade40a75464b5378039581f3b1145342100bf03dc61e5099032b0e534691c467b6fed1d4e3bc82699c84165f93459c9211030e6999f6122b1c544df89bc9d8a92e065034bfc4134f4c33f4849817ac3f0cf8dce87e3b1713343bc248657291dd552446e6e3abc92a31e7dc27d2538b33e8ba9bb974670d5d80273ec446bc79b43dbbf6904ccd1d5f97626ea269aaff86f5773c8e931c0a86d638095b455e25004f64ac4f43c9ab9fe3ade17cc7d8acb52fcf5da2ade0a319f655ab0cd6b1ffb2522a4257f1cfa1c1caa6e4de6db39e35f663449c57870138464b069cd61366c610d0983c4646c2c5ad5626a36c6726e7b69ba5bd1bb1c53f4827232f3389ca7f8a4b17159160ab5ca4f517167b64761e98c2f09506abce775c3a5ff91417061836313c72ffecb058c1521e4cfd8ca196167373bae7c99ffeb12bd6fccda7cc2fa900b5cf9bf941e614dcfac090fc969c1b1658b25a95b526379b0c8642c9e6c7b66817ad12a71c08ff7fe0699014b7c7a3f8a64f1bc27d21ff76c17a287257ead1f3307610e15231cadd381b045548029d5f7bdec1c9ee565a3b37831291b588d0ab461cd7cce56dd1d1986a1b35b7a21691821cf633784eff8f91b12396e33f1ac3b5f52fc302a7c47bd170adc551be522efc1ea2da9693d6b6752ff560e8d18f437e3fe316a2049581c1913c2f52ec9159a78d31f4e8e3b2c505facf2510728890465e907bf9c1d9cc132b1a7187e4824b8d43b9c2971088a5a2921a8f55adf45a81985741ca0b39b4576455bde72c28e3d18b259cbe7968a125002c947cf718842840f407bb2c0d87b60ce4c14177d48d4331451f31b3097cde16c9f8524381268c9efead0db8bbb98ebe9a950cf7d2a6a5ddcc63401f340dd227fa547b6dc575cd8a0c9d2b1aa515d655c0c40568ede05dca6c230c6f8618d5d3e4dcff7708ee933ba3d4183a8a4ec0d09abed1c281ad94c557eedf1aa89419fedcad130dc65c7865c8bf5eaa35dcb76404aec9cbfab57d295c3d2082cf033f182d267a8f7a48be48ebc03a2ef64459dedaf5e6de49cbd2115bed9c783c9fdd07ef6230a1503da9eb56dc93cc919341cdd37bda3f41e632f33f3494ef1784d8eadc1a23da0fc4a37e135b8362b66d840f46b9c44c1138f6d820597a115640512d78bc84f8fcc01f18d1e8626bcf8e449168537b3292bd4244f1ba47045330b7ea96ae41cbc2eba2d592f17cd6a921925a7a3f16eb0671bb924acd246af31bb3a3d6a0ad42280f19a5ca7cbb0171535ad0b49beb91e1392fb453ac9cdd467b11a4fc8df4af69a3aff8c3ae0a204b80d966d07a781a8d60a1edd058fb50d697d5039a8185872a985ba76c73f7de9a89fea9129475b6056dac932846e05d21f756dfd65c999abf2a2b8e0baf6eeb60071e436e762817eef5278012da16946a2ec86b708f7eb78a8fe8a9de415a6e4ad50af93ca6044633d25a9f1fcf2a935c23456463b6baf403f7db61b741db596ae9f485af2ed975080ce34559a9ee59182c9c7a702f8a548f8f78d9efc25d109317d18d5dcaa81652a44d510cb9cb1430d58814b678c504c2d91cd2bfeb7c20d0675cd15b1e93c317502f5c972901047c4bb3ace9d0ed0a45870a13d414d85e1f4a800861becdd626fa9a3f4188f523a296538765309203160a7924bc0fd8a964fc88f6653d04c83cadd4f518f562149c2a96a25f23befa411aff9f9bdd11b70965556f98a678582ed076270aad932bec6db0f8fe8d013b2cd2f7b83154608672f74c16a4dcc5877a1cf498b1171ef50336db03206ded31058231ca542a14a0e32bfe62294151ff641f543f98be5c020363d3e7a750b3cba3ab38235f7d79606f138749132d81b5a98021389ed7c4aa5caa0222ac2abd53bec755cf0593d7e59e710a7670570ed31f62a1d4c68b3b9aaf701ec1ef8d6bf954fc90a42ea0865ca771a25c8f91b707eaf5cd5b0653da94a4a95138ec7ef8a388bacf42b71a8cb871005bfa66ae1cfe433c602a6d4e262f9e7078f8c5e6b6ca9646136b27a4f4c5b1e728bbdae06225c1594e6bde03132cda1be61fa4a709c6b4de8267e694cb0b352e8410e2760ec56cfcac496cbf4804d3bc082b1046e9a167477640a4c6ae057e473d6494ea1fe3745b874b64cd31a602849b49a4988b2f2a2a14b846bc386975dc9cac7d99887b92a6700123507aeb38b82e98e4afc87c98bfc6c1b3909df68c010de57b1c07b9394f3f616940db9b58c5f25ea6acc740dfd50e2ce70dc324b27bee7098d541ab49e64767a91c28421366dd7b05ee0e9863070b7f1621fa856fba6a5b67f4d39eccaf9baf745933e27fedd606134a85bafec656849de2ad457d992e0167c5f401af6b0028eba674a4e40e7bcb2af002ac8ebb164fedcb5eb94770fdd5c36efc086fe4971f25f3b8249a3afcde34a0e525fede2c0d565a24e49336ed413d386a2017e33a1a91e7984856e9db6de0cf81544c7610805e451d674f53c569e9dd1c109c0287b8c89ae9519bd2cea39427ee36eded7f435a3d7796a28a7a0187a861c7dcfe1f2cada8d0d5940c7efbcf3c93c99591460bdf340783508d27c63e5d07f74d0ee7d16e47bc8a633cfa0b737d57338c300870b5c9c64e92a5dc973a6b33425dd46dc0430602c65a8d7e0edd8506472e7ab09c91bebd0b6d11c907bd57ee73b7b847a43e7224fee943a111ab1bc0764a04d2fb2deebaa2f50736e93394ff2f3b1ffef55c618c0af07fbcdb2b2418b2c8043a06bcc38b1316ef84eb2238c4220e2f8fdddb28660e2a6531ed622e675104ff89c6c0ab5060963d978c70eca7cf1acc39326131eec98de46fdabf36dbf3dbe626f2351d9f0a49b1e3411cfdcec491aca17ecf8475bcd7c74c8a50a0a7b356af6eae5cbd5f9b39c48ea983f74caf8f3b595e476e6951b288aa1fa8906f16a65f6605c179b40504181c6172de01ffc642dbb3ca2739da3f59b8370d28fe6f3ec34e8c971d4c3ad1a1a18ef59261cc8f137c6d3ee66fc8d32eee8030c69a5d6c728cb47c7b7078a2f739fca7660199ee9e7cd3ec0ba9f5c39ba9adb686d486337e79fb34db68b0fff6281d2eb2d4f9c689663b3b08891268e865dd96fad5df044a4be5021f863f86dff054b06dd06299106ce323e4059e7af46a8ada31d0272a19afa5fed5aed6c895c199e236cd3300a0aefe1ff38dd04d6d43aad7f5a7a5957150d7150e776c63bce6d69fb4378a5edc0e1298a9c28418c47d0d321ea95c80a7fc8e492e3ebc2cd59c0ff84da91697eecf93a114e2fad636a3c249691c4b8dbb49b0b86b52fc879fcae85713b186fae17af7ed5ac20beedf86fd30f3324e76d6c239f9e88e882e04c3a2152a399a71c67b1726816fe70da04435b5e4c84eba0e57d6aab57c12534d2f7529928e775c8c9f3a5d4c51048421f309393b2f962a35a95c08f48ffa83eb62e80abe7d22941b4fe742f065ccecfa029b9a86e6612acefa1b0402561cb7457f9f48ca3d33b3720a8feb05e5e1cd05"}, 0x100c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000001200)={0x10, @time={0x77359400}, 0x7, {0x5, 0xb0a}, 0x5, 0x1, 0x3ff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$RTC_AIE_ON(r2, 0x7001) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 10:12:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/48) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x5, 0x2, 0x4, 'syz1\x00', 0x8}, 0x1, [0x7ff, 0xaf51, 0x9c21, 0x5, 0x4, 0x6, 0x9, 0x1, 0x7ff, 0x80000001, 0x100, 0x36b, 0xfff, 0x0, 0x1000, 0x6, 0xffffffff, 0x3ff, 0x80000000, 0xe9b, 0x81, 0x0, 0x65e15637, 0x3, 0x960, 0x5, 0x4c, 0x20, 0x0, 0x6a5cda5b, 0x24, 0x0, 0x7fff, 0x7, 0x6, 0x4, 0x1000, 0x401, 0x5, 0x1ff, 0x4, 0x41a, 0x2, 0xfffffffffffffffe, 0x1, 0x9, 0x3, 0xffff, 0x1ff, 0x4, 0x5, 0x5, 0x1, 0x401, 0x100, 0x5, 0x8000000, 0x9, 0x800, 0xffffffffffff40df, 0x3, 0x8c8, 0x30, 0xfffffffffffffff7, 0xff, 0x5, 0x7fff, 0xb, 0x5, 0x0, 0xfffffffffffffbff, 0x9, 0x1cd0, 0x1f, 0x7ff, 0x7aac, 0x0, 0x0, 0x4, 0x4, 0x1ff, 0x4, 0x8001, 0xaef, 0x3f, 0xffffffff, 0x7, 0x9, 0x5f6f, 0x2, 0x1, 0x1, 0x101, 0x1, 0x1, 0x20, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x5, 0x7, 0x2, 0x5, 0x85, 0x3, 0x7, 0x2, 0x800, 0x1, 0x1, 0x2, 0xcff, 0x3, 0x10001, 0x273d, 0xfffffffffffff801, 0x5, 0x6, 0x2, 0x8cd, 0x2, 0x0, 0x7, 0x0, 0x20, 0x80000000, 0x4ba, 0xbf, 0x401], {0x0, 0x989680}}) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x36d8}, &(0x7f00000000c0)=0x8) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES32], 0x4) unshare(0x40000000) 10:12:26 executing program 2: socket(0x9, 0x3, 0x7fffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x801, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x24d, &(0x7f0000000600)={&(0x7f00000001c0)={0x228, 0x40000000001a, 0x201}, 0xfe61}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 10:12:26 executing program 0: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000100)={0x3, 0x0, 0x2080, {0x103002, 0x2, 0x3}, [], "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", "486c8546c4785d07b92e7c31ef7a8aafb877ebb755bf390126a17e5bfb9e9ff30e371503eb8ad97c32984fbbe938aea7647768721f7b0aa08862e7ed1c5980bbd587c73f568b6a672cdc3e1121c82498991ede8dc3f3414ce25af196f31bb34ba1a81518a7f960b788382241e43a019fa6fe2240ba9fcd209afae809d758fbb04db95cf1d1f8a05d2c73f1c9d368702b8f9cedc06ece1ad23f1c55a12016eed58a75b9d8f444e06a2ea5b67073f9e6a214ddf63b4c9d3fea66cc1c752958c9911b753127dba8a4880c4117385986370ef1ab77b24e172870061d6759fb83860b482b905795a6563566983713e794861d4e3ba4bf897233d9851fd0da48855af3830ccd14faded03dcd28a05e3b2f7bc98e4b686715d6ca1ac6fd24bd7b1adec32afae614fc2b1340a0cd0de0bef5a66e64cf27d907d7304c43143b40eb9700203c5c36d5a49ed388191e35acfcadfee55bca1638395d3ac96902accb6d73a5d36fcda07c8a078edf04aba92c34e0f852726bb48c97bf094cfd09c519a5cc6f136f7ea9e822fc75bb55c8a60ba0682cee3e860ec47632a40d84197e537b607afee7b724bddcfc6a6669572a674f75590e06afc93da86660cb00814cbfb13005396878d46c8c13d23d1db9d822561e582187e884db76db8858cfd04eabd3d407f66e35e63154e4b14c806fa4c31b0c34dbe08e63555711641ed4f839935f4abb6f0b166d5349d5bf75f99e00b44cae29da6c2c9ff0aa3ce14a928205b2f557eb8236f468c08a6c8fc7f57741422f2ba2786e746e52a4549745307ca65cc7e2c8dd85ae541644815f174898b101a265eba0198a69c9c2032d52a88718fa5549714751e111dbb09764f4f8e5339c45f8235e4b5b85f63cc308b5818307a4cbd4d40789876e9f17713b3ce44cc4ae525373d48ad8f0c8632d9dfd1d3cb5c2652023027505c56450e099d0e9c22b9f1ba0f8141cc545e8b11d484dc05aed1d8302c1fab61bc77136091ee80422c230f9b2cfac378bb88f0b5a336c3806c2b07b51cea6dbe4d955d31638b4ccc099221444ff96935cf654ff6fb7f168d510c4d90ae2bf5199665899377c93c38b68ad8c46ecd04d0152b9f088c026421613290c154044509e547b984fc4ee8ca9bb5f392d66dd2dada6b6d8b2dd95e55dd03dc5b636eaa3ffcc03f8fa89fedd678f8df04d001619296dde88775ae5371972fa87fd596eade69f63a89240fa7b49e55429d0130092b94827b27bb12bf21ca3afb624bc4e58317081224f04a9838e63c59a714238d6b161767747bd7f501f8db0455274b030c1ad956637b6b61c52e9b27063057fcc8c3effc28baa03d3968e9913c17368e1bd41cff040fd4df86a8722fe7b5534666aa85f3140551bf1ca3c68fd69c63f2ae073db8c81158934de116318a8400d2ceaa950877824bcce4a1315828e42e74eb819d2506ad52049923d5f3a3218e86e1bd70fbef9037c14104a1add92805549226edecdc3c6dddf1b386a476537c72cd479ca5620a894beda558e334023d51313dffb9b8aff5d058920eb49f9921679075423155d185ef616fbefd8acbd0c2d867cb7b348ed548337cdbea8b0d8c59b4dd74a9f8adcd27c80fbdbab155249f4fb7ad3934143a7a2345ed3da589c2ac2c78414d6b994352629eb2aa8624ec7e62bc7a6f7d65f06170121301531f38d3b998a6f98948a5f3d354d3efce1ab5760de67ee97277fa3e90733d491361fbec366b37d93f9f57ed0000f52f7d282debcd509bfd06d7c3967b6788fbb713d51181ba9d709297f33c5e9a076833baab513f24ef93121490e7ff9ea2fb57aa35eac93a0cbf099b7967b37b0c162fc2dce03358c0d18dde2089fd74143cdad3fb8e102b17938002ffee4a2cbb3bc160b13ac052a4de18ed5745458fc69d233d7b7310968df6a527b6733164ef9f62bb9e3b0df5fed5b91f1dbe95ec38836c57d0a0e7f3f6d3f736e306a9661dad4e8f52864efc86f9a6478697c37df340812f380f79bb2538670d7280473712389114340298fca7d0e60b7719db6b7dc78a87968f15409501e52bb961f8afba92e6e9fa174dafd3202d88f05a82389770f0fe13d11a9051969495271bf8cb6e9f94d8478f034e7d5cd97a2790d33c5a9c3390b59901e4b80068eeccc59f566bee130216e12c5b0100ebfdf9c86ae9b11da89bb774151f11184db251ca40e92fdf029e2841cee63900bede6b001025aae3db7319439ab95bd4e6df8d4d2dc3f3ead93ed6a9855dd3dfb4e8963ddf605e35bfc2337fd5555b2c5054ba4bf686d7ff8151b26704bdcb84a4072c5fa7176882c0e1427ff87ee1ee75f0e05eb3479a11bb61ac62d7c5e0d3006514e4ba300a93f0cb021fdddba1f9042f83744d2c613752ce70694d7964ddd85ceddb2255fbb1d1c28bc487db3dfdb26bead8898a68f8835b4a6ee6d0bbd980ba73fceed49a45907343bee4b249cbcdfab0c85a3fe348d6159d6388c7c995bacf0f5a61d5f91429678473f7548be8f62cdc8a2f85e6e0b1201f28558c44357659403ce7b267befd5bd5c089d3549a4981e1dd1d4ed98f285e01b55a9408938047f0e23d7e223340fe8a6eacf6cf689006cb6b010545181bf96ed69436a652acaa7608a4b6bfbafebe50585422ce6667a814f4d7e6d881f06b237294c4f87d40f13ca9da99723f99b73c7ba1017cc5201d7edfcaa33d98459dd175d8b9507fbc967aedc2c77464e5a6efcc8def6960e5f0535f01657bdbf4b205c27282b9bae66b74d8f403c99474de31910fcb6019f59ec02f3001e55e7d600d89ca76b0f71cc02a80c4c21dc540640c3262edb4b30073b12d52fc71d8d4f30982ab7babf013548284465d8064780e25171eadf030a33d5f5681741e9a386d6a1d70af3571e46d36a7f59d5d716857bf2468fa8e29513fbb38eca2454ea8f76313705d03721349dc6405a4cfca8d4c3f2c55bc2aad28b763e9adac1db71b888d9dad2a5398e2c7a79ea76b9188a8c19270bb5c371f317970155f10a4d2bd15af8ca36523aa6461608fee98f4712da7df3881b5dd462f92bb8d830a6874cdc1f90b61da122ba38b2d8f056597091b5ed17c3f249e375f39d398a1c6b25da3bc40751a61cf1e498c3e22cf6fab3b9e3821db27ddaf1a0f90a76b5fcc034ae62745465ecb50142121ee6746a884b63fbfeff608bc6526e7fd2eedc86ee3c936fcc6d3f843b0c52825687b5d6d8072a3e702d75e5d64b01f96c8cfb0b794e322e8676280838bc88d910871ac7d25f05cb421f1f8ae9ce7eddf45c0325e95d0ccb2b6960524c40ee3d52caa0d76f7e5b1eca657c5ba28c16cd40236a3e8fd95d01aafb7e42f41e57c2801c5cfa6c0371e900c84e2291349c5bf51c7249e5c52b8b7e9e7fd0f81bd6871b667c7c6df923e82d6295007ff6d3c463e7dceb8181cdf3f6d39cc8a495d8e2074f90bb54da9735820a5f22142b2326ee63e844a7da3027a3575a2e5774ae1d542885f6171b10bf414a497d8d836b66e71160997f19b96b1aac6a0104ae00b4c4a8204c1fb9d0222a2f647cb9070319ff1b91a7430da541135b8af692c21cd52dae1b54cc3c97026b954c351a4a6c57b8479d0c9398524a9b9756a18084b1b946fccd37a4c09c16479672df0ad81674db0487391cba3505a4dfc78b9a5a9b808501a924023d644d8e51983b9d7d482a4f28fa68f5fdcd8cb6f51c371aa3c25ff584884245d6593f531ce65d45fe512cb8e8349de40f8a488bd7d2427aaf7b70c674764720fb4aa67dc42d27b38e2ed23ba931a1d05789991a64686637a02b718ba34128e7295690e5bb2e5f7276214f20a22a5197c5931f0e5cdd045ca2579da0d9daa25d3266494faf0c1e9f4b8b451eaa1a8f4443ec6ab70b809cb833c9826ee5faf0e191f3375fa3c8c7d567a82c6d9dd8c7d46c96f0b2e04c069e733fb5f2ef71ea18d4c29358d64dd4d907b5ba0fb8cb8679a6785c09bc3c6826ffe22f3ae43d97c04d7bd5684d143092217ebc2ffbf88d6c5323106aac8327e14cea345b506e0f8480b53304056a8dde08da6d6e6187976195ad31bbced6d447efff9eb104ffd26f1f3b3db92cdaf3831c9d2febf19001917804e0b67c251f1acdd762b3d2af07fce9dbcc67ab62bc10f88d6fccc9995fa52cc77610de167a68a1cb819cdb80a01f2c7553ff97c00bf34e6e6b94f5e1d101452b018c64fd227eca39a16b7c9c975509af93e85d7f6f39f8fe4cba1322bf6788bee4e8ce7f053975d2a6ab9b268789672b19cd4d0bff938cf82c6a4bd07c71ae85ea0afc6b6c5dad49af7bfd582da26ba118fb12036132c19a2e19da3419c548fc66eab205a54887250ae295afe2a18966b9a7533ac9eb9266c9409a7dbcb179b99581d34e19df92d64264504818473c764d3fcf293c2fe465ea4fedf8b11d29c1c88f8ffbfc4ffade071c89b553d4f99718c60703f01eb447b7e54f11936bc16ad7d510cd5b7835d6e32bb92834c22d8f4c77285c2ff73142b3663b0bcbc132ef7fac2f37fc16ac78127076ee9c9d097a56c8a819b4f7b0cb1aaa9643759eedb82c491bcfdbafb5ad64f01d3826a75b847f1d73c14221cff6f1899f1981a6df513b6aba9ffa1eb468c4c0315a42bbb22e3ba916f6329468470d50dd3df7df1201467e36b343a0befd83cfab73b7a5c83e6aa5395bdee37efc6952a64eeff3358bb075d9175f03895f3b07f37d914b2b924b15f7d0a4f0d4cd43b4fd24f3258df41ec527eff3fcb414d4af3b8b5f4da5b11838499a238088be43df3d171c85de2c282d8cd6c7af6e9957dac1d81085e0bc199fdc64d40405b4eec0e7102ffa4c56a1d502702af000e3819c22e7d1e0e697d324ea405f7cf6f106df24469488e53df9f9fa503d7ce1659e04d44b904b7766f48416bc1504f019e774f70d4f314a3a35249e7d61a3f64f7d1fa969b395da2b7258240e52f84ce49955801ec99fab3c3afb4392dc10f931aac438a6166b82acb9e7cc76b0f2ab24358d5a90006f83283e1ac0905ed45feae4e9d07d5c24556500dd3f41a6910e299179b17d75fcd1c9cbcea35bd9a81d1f68e6ef3da4f8a2c9730df548505801d6194e29b2e41a09107a1a94fc0a19c37b78dfda84ad5b51a7c16cd127827ff5e17f207fb7fc0dd38fbb14a4b6f8d1c9373a40386ab98826f7283b30ed08894a9cb2320eda9d598246a7cca481ad5c2a0f97836fcab2b86006fdf510cc5cbc56ca241c19df984b997c18a6730320f252395656283c8ed1fe337dc922367f21e1cbb58bfc8568b90d3ff58480130c0fe2f83671294be149c963013c288f9c15ebae35cc303cd475ffb10082267f8687ce300f527db5e1f62ef8b3635772890d52ac98e5cf0468485a0258e91ec98d5c6bbe95ab7cf62e09e9d9f1e73374870fa07a947b2d461c4adc81af1cac1af15c3f721aaeb1d824d08150e73e90e67da99f0ea9080070e4844ade342eacef6605c1c6974aa86c6e974845b99110c7907261d0cb561cd164bf5d9726f82014c7407c78b02a93375dc54c3d35f470839977ce3389e18f285dee13d66c015290f092e885a4a6afa026c9ebcd5b9e9d497281296ec394a763f03fad7fcb24e403c911d12b7960a7792d3dfcb2b462419683a8b09619936d44c26cfe276009a0eae6eebb39a577640d0b487627dfd2e8541812c4d0b81d8158462e9f6b3804ac527f9cf96c4a57b3021dba0cd3d6ebc386fb7d78d40f3499123dc63427f1adb495ef6a73f0b06c315f50dfae4f866ea534cd7e7652328db9cb2878441efe8f65"}) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 10:12:26 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:26 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:26 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x5, &(0x7f0000000540)=[{0x2, 0x7fff, 0x10000, 0x7}, {0x820, 0x9, 0x3ff, 0x200}, {0x80000000, 0x1000, 0xba0, 0x7}, {0x0, 0x800, 0x7, 0x7}, {0x7866, 0x0, 0x1, 0x3}]}, 0x10) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x7, 0x240600) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000200)) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000900)={@mcast1, 0x0}, &(0x7f0000000d00)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000d40)={@multicast2, @local, r2}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r4 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfd06) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000140)={[{0x5, 0x45, 0x3, 0x7fff, 0x2, 0x8, 0x3ba, 0x0, 0x8, 0x32f8, 0xfffffffffffffffa, 0x4, 0x1}, {0xfc5, 0x10001, 0x3ff, 0x9, 0xfff, 0x3, 0x4, 0x5, 0x6, 0x6, 0x1}, {0x40000000000000, 0x0, 0x1, 0x3, 0x4, 0x80, 0x8001, 0x4, 0x10000, 0x0, 0xfffffffffffffff9, 0x1, 0x8}], 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x8, 0x3, 0xfffffffffffffff9, 0x8001, 0x19, r5, 0x4}, 0x2c) getpeername$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f00000003c0)={@rand_addr="57e395154ba3edfa59977a291b440c09", r6}, 0x14) recvmmsg(r4, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {0x0}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) 10:12:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='ip6_vti0\x00', 0xfdfa) socket$inet6(0xa, 0x800, 0x7fffffff) epoll_create(0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) pipe2(0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x40480, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x218, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff8e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4281}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f0}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x25}, 0x8001000}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'nlmon0\x00'}}]}]}, 0x218}}, 0x4800) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000002) [ 754.332499][ T9946] IPVS: ftp: loaded support on port[0] = 21 10:12:27 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:27 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:27 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:27 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c65563ebffbf836f8671d30202f6465762f7662ae2300202f6465762f7662692300202f6465762f7662692300242f6465762f76626923002074727573746564766d6a65743162646576707070316e6f6465762f2054495043000ad9673aa6478c1bb43659955e599f421863f778cd866c549f30288c6afd139cdcf9dda198e6"], 0x7e) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40410000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000085) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x20020000080001e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x1e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), 0xfffffec4) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x311004, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8Oz4\xa8') mknod$loop(&(0x7f0000000640)='./file0\x00', 0x6000, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890c, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x4, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r6 = socket(0x10, 0x20000000802, 0x0) write(r6, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r6, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000004c0)={r7, 0x1f, 0x100}, 0x8) memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x8000000001) [ 754.838748][T10443] IPVS: ftp: loaded support on port[0] = 21 [ 756.122802][ C0] net_ratelimit: 16 callbacks suppressed [ 756.122812][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 756.134542][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 756.442847][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 756.448704][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:29 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket(0x8, 0x805, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000000)=0x54) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x101, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x1c, 0x18, {0x1, @bearer=@l2={'ib', 0x3a, 'veth0_to_team\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000140)={0x1, 0x1, [0x111f, 0x20, 0x7, 0x5, 0xfffffffffffffff7, 0x24c9e3d8]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x2000000000000000, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0xfffffffffffffffd) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x2, 0xab2, 0xfffffffffffffffa, 0x80, 0x3, 0x10000}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000480)=0xfffffffffffffffc, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r3, 0x400, 0x30}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r2}) 10:12:29 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:29 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='ip6_vti0\x00', 0xfdfa) socket$inet6(0xa, 0x800, 0x7fffffff) epoll_create(0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) pipe2(0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x40480, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x218, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff8e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4281}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f0}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x25}, 0x8001000}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'nlmon0\x00'}}]}]}, 0x218}}, 0x4800) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000002) 10:12:29 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:29 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000005580)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000055c0)={'ip6erspan0\x00', r1}) chdir(&(0x7f00000001c0)='./file0\x00') r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x208200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) open(&(0x7f0000000780)='./bus\x00', 0x1d18, 0x3900000000000000) [ 756.801871][ T26] audit: type=1804 audit(1553681549.413:336): pid=10646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/1089/file0/bus" dev="ramfs" ino=149250 res=1 10:12:29 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$sock_ifreq(r1, 0x893e, &(0x7f0000000000)={'yam0\x00', @ifru_hwaddr}) getrusage(0xfffffffffffffffc, &(0x7f00000000c0)) socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) unshare(0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x800, 0x4) 10:12:29 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:29 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:29 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 757.093735][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 757.099558][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 757.105470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 757.111252][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:12:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x820, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000a0a07031dfffd946fa2830020200a0009000102001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 10:12:30 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 757.323344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 757.329756][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:30 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x400000) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000100)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x6de, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000300580f02000000003f420f000000000000ef000002000000", 0x38}]) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 10:12:30 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:30 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:30 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) syslog(0xf, &(0x7f00000001c0)=""/77, 0x4d) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f00000000c0)="7da2fae31153453b7b3a26874162638b470aced0494b1447797e425433102ba37f478a65a36cf0786bc595668da881b1696404fbc6a8bc1c235ab288ac8c0a2078b7551c289e45b268cdedfddedad2ac74c406071e5224731475ce7afe491ec2711fce5e452d57540023fb2472b464399e6fa0a43ef579ebee99ca17c88e188ceae6059ae021cd4bfd79715ecf2e15dd76bdb5ffaf3e737c99d34069fc15ec54f641243f76a3d9f915320d673f90588fa662dac5ba0e17ce6ad495ed7cf31c7a95d7ebc6dcfaf7dde65f996425f1af77ba0d10502a453a9b1f4ba19d439737fcc9f7b019d6ec1512db22ea34f53a8bfc61700bcd", 0xf4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x40000, 0x0) 10:12:30 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x7fffffff, 0x2, [0x7fff, 0x7bb]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r3, 0x2f, "f26026fc8d09fd4d14e777f273123baf095493047da1b0a777fd587babcd2fc65442424aa5f19c2115acc4075fb442"}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80100012}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01002abd7000fcdbdf250900000008000600090000006c000300080008000300000008000800400000000800080001000000080008000300000008000400a8020000140002006970646470300000000000000000000014000600fe8000000000000000000000000000aa080008000400000008000400090000000800030004000000"], 0x1}, 0x1, 0x0, 0x0, 0x40011}, 0x40001) unshare(0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e23, 0x4, @ipv4={[], [], @rand_addr=0x4}, 0xd3f}}, 0x0, 0x101, 0x0, "7313b77ae7292d6a8b638c44fe5dac754f82f9b2718de91b41dd004aa498e6f740bdbeef4e2bde0ad64a6e8d199200577cd825c2c9ebe618631aba29ddac80d2bc388f641777c7c2130004ccd20618a0"}, 0xd8) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) nanosleep(&(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000004c0)) futex(0x0, 0x0, 0x100002, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000008, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)={r4, 0x29, "a6bb7e34381d04e8ef9b0105115b0027c07e2e0a54c4fa993b156d3336ec014f8d947f2c6ae5e4c1d7"}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000480), &(0x7f00000005c0)=0xff75) tgkill(r7, r7, 0x13) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r8 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r8, 0x0, 0x20000000008, 0x100000000000000) [ 757.596544][ T26] audit: type=1804 audit(1553681550.213:337): pid=11104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/newroot/1089/file0/bus" dev="ramfs" ino=149250 res=1 10:12:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x600000000000000, [0x17b], [0xc2]}) 10:12:30 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:30 executing program 2: r0 = userfaultfd(0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000240)="0adc1f123c123f3188b070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) read(r0, &(0x7f00000000c0)=""/214, 0xd6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 10:12:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) write(r1, &(0x7f0000000200)="3a58d9941c16a72c221e68af931f72ea2b744e9c7cc9f756ccd46a3c3f6f9fc9b5fd91d2bd8f2004e4dc76152692a2f9bbc086bcea701a0bc8dc9102c38e53a077d53ecf8b3d5765328cda8b023b016f82cbe3bf688a6516c00c45eb795e77192562193562ce6d68712db8531b2d084561731f0447f22c07cbb56b97497c499dccdf207b7d0f3fb6b089d4560d2ae2f2c2fa9c1478d1bbb47f9edd0a1fadb35fb30f3d9b51258d0b07c5161b46215a2f84c49c1cae85c485307ac9feedb258516daeb7794a6b382faefc541384070eb851d68fd90d1fab46dbea09a5e0790b2d7a27324b9a2d20d211734787e4f719c611c52cc182c6c6d8255fa19d30e0ee54013b8218a9ad478481c81b618c934cfb67025c4bad6ce98c25a7fb1580ac3866decb0179dfdd0ad2824cbbcd8c1c6d44963c69f279a6326bec59dcb4fc032b003f211ef41196a128f7736de89a0b19c8e7d676961e5afff312bbd66f06363f16d94013c398bb2294915869d1f40f97151ef49819af972abbc631762d67a1476d614e074c3a97e54cf4279fd6063bdfe7cc70203d886711e68422c5d8cc24b32445327a4d3388d9253bd69b61db649f233347ec5f9e905a4d347e436caf779ab490cb17ab6e19a8c08875f6369a24e32d15fe966ff479494db26cfce30362b240df38ad616552cf819b9b804dedcdc8b83cebd04b8f760e18eb52ad60ff7d1f2d5200592b192fff7307a8bd217d84948b04c048fed8348d5d83bd89f1ec66b8d0de55ca4e84041a62573d70f11147204a83cf0e5e48afe51be22f7c0c2235a661a8df6cafd52a68e2c182671b7012599323239e567674966773230ca18158f65420c16b93acc58621127b6a698e79206a8a28dc908c8f12ef69fc94a94194d84d13b0c755a9cf9b0f973d469dbf0a9a022de70af2bc54a2ad29852a636459db56bd0a40ab7adfcd43725eadc813ce9335ef28f1e3d7989e993280c114c0537ec5854d7c4f2e0cf9cc7aecd15f99b7bcfb27afd05f9d9a217476f30d40b2e3c1af0c367a137f3330fad786c20a0ee554753b7b4d263220064f1f79a6a0faa12c7bc8798622701d8215dd026ef48159aca3f1ef1d07b0deb42fedd1a6aad3d6d6013abb3a926910643b5ad7d10df8fa1e09a76d2fd86d2f4bf64c61e3516a1c749b72b61ba98c6981f68e2ab760043bfbb826d5a1ee769c028e42622098fb5e675bcea63b4703bef8182f8e849834ce535d567d0d19ff9652acc80d90eb16c7e0fe368ba1bc6d9661943c24c920c5aed86f897ca340fcdc3b886974f143a0eb0bda244cdc1c895e7c9a21966ec46e7e21c32d34a15e067ad3e0fe48ceb4fe53e56d7503eb899efa2d30f19b52b62357689db91e672ce659c7bffdf11a3900e0251d492efc0af682e7159c15ca137b92cb8e202c73027b901ab51c9d5e8f2ec10999a7b6c881ae0b464125bada820499c560c2b5d924b2ca6ab693216e1d6c1b0d3d6f099b8c20599e3da5e40741ceb703ebffd02b2e0cb35e16a757bbd570ab3bfe4155cf942a3db1e692cdaed01f32d5b0864301ab1f9a816d493c8ab7de23684eb87f01ba1d75100a36ff839d1d90ea6b1c16a4137c911b7bd6b87f70feed9e32b221cb911d19f9aaea39ffa232371263ce44eaea6b52b244c4b831eb556c10814ef62b786a65befc0ad18f6256fa7f2efdc2a252901fc5f0bd2d38ef1d64d2428599c74e248d9be65c69b25d2d1ebd6f9552937819b1ea972c8644934afca57b4e807311fc81695ffd448eda439be352055420b85f9930109bc6792e6d57e8889960d8eee249d48c14ca65715ec2f6f9c29999a0194ca578c2e7cf9ad5835f4bae3f040731ac97e5a3648008d5281735ed3f68382742ce1430b225b92490670f2179e4aa613dae359c6a61c9bbc52177798f7b01b5308dd05f386da8724bae9d2a0d6571c8a1b05f6fb7310c108ac65a3ed587b199d2a4fddbdda95773f391242756a90e24e1cd7653a8c6786b1df646a0e2fa39c16810460bce8a69bea6d2841ae9ed7654ec49416e7b19362751243657f0e4a1146df3015e2a698bc0be554dd5390aa6118938f57f41c56dbe70c129bf92b2c6e5773a64f4ec55c9240d1df4fa360e000f7a4626bcf6a60a41226c2ff7f1c16fed3709d2d3ee872fc64e75079ee170a917dc3351a6098be7ac8f1b16bc3bbfdf68b62ad3d5e27f64c4432f6cfcae23389a477d9714149df3f23e211869156cea60f86c95d6be9d81e8fa466063e94a5fbb0e576a2afbc6a04bef1f883c957c603b7cf2cad2faf9908ac55ec82d4210290dfb72b38b39ba724237ac71520331183c33584480ded49d271ec83663d961a80b370f49e2e21e780f76de90f55384b5c283f774cd0f7d3623a71b379b6f762476724fa213b99faa9c945758c81b950d11d659927df932f7598f9fddb658ab021725772900e2c8861bab297263794d87372d050fadfeb2c45a5da2744a8b23d0e0de21259df38f87003671eb38e5217953c1bf0adeeee1fc7652a4ba25236a2bd4ac3314a46350dd29457d73ca413401c9dcccf17edff9a84b7fd2a0af8489e36c049c863d883fad8282b2c4be8f263ce984dfa91d59a8e7f098b96f99dc27686bc95869d96598e01dcc4c4bb584a1a9f9eb1ef231a32933f83478b8e814845fa90f080695386c585381be2162c6e22a76b274349a5ad490f6a1825ab0570a62c5d418fba801e7a9c53e54b575cc1289ead94c40fc079c42087785000adafde6f370b893df2fd839fb451e95c717702b550442aeda816211f54a3281652d8d5eaec235c949ae05438220eadeb33d0a44d4bb235206aa3a3b7aacd051c80d88726804a358b774771ee250a3425644c4e539f0252df3285c4d2ed2bb8bd5265b75669c022e86f824084e9b88fbab0ac57f99c8ad923e0eee119b7f9252add4e7458a02d14b33434cb8180da89133614a6f5aa7689173925164ba9f77adfbcc9036b730ab9b9fc463ea0a5cc7b1615a4c149f759c2b5761945f2f92d3eb2d252eb8852d3cc5fcbc8bd6c3144a35f3a8f4ec15d4e2dee9149c319b83edbacf85ff7d71f3498949384ec6ce17b9eb701d416b5b3169efb94682d0a30b9fb89ec02ccd974144773bc2a8e83228ffc196873a3962e53b8b8ed9c063fe5a0d4bd7d7407d27c7b7cee895f3a448a2bb85859746c9910606b6a81e4c2d624a564eb715e6157ce405053525234ab1583dc5a54dc34af55f79716835ab9bc5fd883fb1cd693b57889339e792d2f8e2862b83a76a336d4cbf2f8028b8ef7d98ee793f54560cdca410f1ae75079509bcc5f2f6cbfa5b1e7390117f4ae608a615bb82f31d57322b4e7ccc0684021a519a2c8baf921d46e3f7763a898981c1da3caf17ecd5cb8621c1d389408ea83ebea4ac069d2c6127f895521ebaa4f664d75595b5fab97d8b60f1b25a1f6729c11fb44e48ac49f6c1e801519d66e2f1203e5e888752c89785ad34b39a435452279f9cf057543c406a25b8b534751b65f5a11daae0e7d61ae6e4486becd1c4fa3113e5bc7c7012ba01b62f9cfc5128bc25e945cafc6cdc90fa0b9eaa02afb78fc7116bb600cc1ac99ed0efc924010dd2672cc1375948a0a234b6bbaef359a1416fa7e0e3934f5622f8bf3f9a366dba49a3c843140790b134c9e22f8189782f2dfc719e82cc2c7d5e9ae197c763f859af420fb68c17ba03546cc32316e9c9f4c104eaf7b8fdd838e13c6b1c73aabf2ee150492456b860d5ee93ac80faa5c082ad890f75c5abc2f79a4a1fe96e66c84f7db9da3d37feb37213a7b2fa679d52fef1ae7ce4fe27e85c03ede6085943cdb2b88d7cbf2bfc4379da2d7919acec3d2b46db2a9b263ae8ad15ab2522d0dff2a4e9b1563270dc847a6bf9f052f57b3131a63bb9b568dfd490ca07fcb82b4ad6e5612bcd96d3774cf6113773aa7925458a7783f401ffb66c891dfb563c079abcf53a606b1d0b6e9e8c46963512334060c3b6ba9a54c0f9efcfdadc979cf73a813261a46d02ee2f6a2796a02087f6681f03aeedeb6aff998d28f8fe5be8353732977b5a5fbcf4d08342637416c69dcc991d7cf9f468f352bc08c69f61239d8851ffa05cc9e87ff7afa6a21d94f3afad915101da32cf4fda60cb095cdf6caf7bcd79712b22fdef04ff180476ee30db1ddbcfe48676a02f2dcaaecd321a420ce7e8380697c33766f1443f8e2f3b63d45fc8d0cc0a27a94ada8f61bfbd24f0533676beec2017dab2130fb433366cf9ab116e9be3a75503390d08e6a2638f4271b01f28957d904e6b6298521b2bf8ae124bb1ffa780e01bde7fc143b8fa39c547e00837aab6e27c88527e030fca2f09d74bee0e1ddafc5c7560abdff66b4feb47a85bc5b957d84535a8d00ab5be240388c8fe7c64748a2a7f5e4125294dd0bd834891db299833b6666b761d23039c06ebe5efc25f8dc615bcc0eb4de13363dfeb9eda6b85a9ba2bc13bf25f3d7d5a0f16f629926f483dad7bce4ed29e615d2e2a1d67dbf4c91d47d7e08c9494eb8b60f628abfb76e3c9a5ca1c815eb2e60eb593d4778a11f43d02b7ea311e1a9155312bd6dba93cf18e7c353f2a267cf94baf0d938ea920152f7e61aab07ef46c3e1f9514b82448fc96dc85740aaaff5320db5f7461eb55bee58c01ed801c8e545df6e0c3ae11d612628f7553be9c3f023352f2e0fd6a8c24400b1722f89b703113e6b1850b4f12d45108b671ff93af34ec00e9caefd8c0740c6c38fada16d8e7be456678d90200720d402509389a12b177504d5fae5fa8310a5da2cb54535c9df849e2c8d2085f1d99326cd3f493187940a4a0a7da2922caabd2845b4d31e4174696204b61902620fd7b25b10bcc3bd419524998288a37dc4a2bdde6f6e572bfe85496492015c9e0341ce164098493efd4c19828bf2656d59fbe764d5ee4d2c9acac822cf2f384065c315574f3f8bd7bb5f2b97cd67c0606d90e74e5e5cc4410edfb5c9fe58f8453e57e58c175b9dad3d9ed9b628d2a4f6afa85e1858d0e21ed83fcf93a434672cb5e15bacc9b4e4ea9976adec8fbb5a89a49c981ba934ccc7a6508b2bbb0ca74b4cd8ae6a783b8599521671d2843f86f2aaf041cc62633ca1c2d98125765d37f1677467a41e07c7a68292ff586a06e7f91c178a2be5b54c60b60899bff5e56e0884ce9dc630f0c4d9662402aebff7cbf419a2284ead7045e488318ef8fb6f8031e272032303b449d34028d3e7b101be7fe653223f5bcc08b60d7a21b48148cffc107c9891e0b1f32427c6b9c28254aadfc969b8857822c8730f5bfa687eb1eb41dea5c7f619b401836a9974a5c98789d3f321e6d47d33075188bcbe9e30f45c444b454dcc2b7842ea13f1818c37bda59a19abc5fe4560aa56634cf16465e030d190fc4a162e440f42fa317d170c4553aafce1600ebebb5dfa4dac240b97238a637167f09abe00f461829739b4165d1dfa3322f359725772497b5b67bd64c8cf40607347826702586ebf88c0c7342ba9164a37933fa5d6fd1d75e09f2a3977780e22037cc605a9a56fa5d536a9969ea7a2093640bd5ff7f3d617c14c5353a1251104a5194847e87384b496ce2df67766c108b5f1a0d47142b5b796905187e118df53e8a3c5b90ce7202b02501c9a7bcbd0a1ea995de7268bc2b8c5f346f318467472e036e7deb9aa5c8d5956681b00de95fef6fb8cc937f575eccc9e3acecbe989aba57d078140f058e6bd464116e46220f6f913ad3a7294417f5d66139d944ba8ebe7c216869eaf97927ccf8d66db4d8add785120047", 0x1000) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x6100, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000002640)={0x8, &(0x7f0000000040)=""/52, &(0x7f0000002580)=[{0x5, 0xc3, 0x20, &(0x7f0000000100)=""/195}, {0x7, 0x6, 0x6, &(0x7f0000000080)=""/6}, {0x6, 0xb1, 0x9, &(0x7f0000001200)=""/177}, {0x5, 0x5d, 0x0, &(0x7f00000012c0)=""/93}, {0x7fffffff, 0x77, 0x8, &(0x7f0000001340)=""/119}, {0x5, 0x1000, 0xff, &(0x7f00000013c0)=""/4096}, {0x6, 0xc3, 0x80000001, &(0x7f00000023c0)=""/195}, {0x3ff, 0x87, 0xfffffffffffffff9, &(0x7f00000024c0)=""/135}]}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x24) [ 757.916519][T11299] [ 757.918881][T11299] ===================================================== [ 757.925811][T11299] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 757.933271][T11299] 5.1.0-rc2+ #38 Not tainted [ 757.937861][T11299] ----------------------------------------------------- [ 757.944806][T11299] syz-executor.2/11299 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 757.952871][T11299] 00000000ee8edc70 (&ctx->fault_pending_wqh){+.+.}, at: userfaultfd_read+0x540/0x1940 [ 757.962438][T11299] [ 757.962438][T11299] and this task is already holding: [ 757.969805][T11299] 00000000b24ec869 (&ctx->fd_wqh){....}, at: userfaultfd_read+0x27a/0x1940 [ 757.978435][T11299] which would create a new lock dependency: [ 757.984331][T11299] (&ctx->fd_wqh){....} -> (&ctx->fault_pending_wqh){+.+.} [ 757.991800][T11299] [ 757.991800][T11299] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 758.001249][T11299] (&(&ctx->ctx_lock)->rlock){..-.} [ 758.001261][T11299] [ 758.001261][T11299] ... which became SOFTIRQ-irq-safe at: [ 758.014196][T11299] lock_acquire+0x16f/0x3f0 [ 758.018806][T11299] _raw_spin_lock_irq+0x60/0x80 [ 758.024534][T11299] free_ioctx_users+0x2d/0x4a0 [ 758.026014][T11259] kobject: '7:0' (00000000bb5f0325): kobject_cleanup, parent (null) [ 758.029390][T11299] percpu_ref_switch_to_atomic_rcu+0x3e7/0x520 [ 758.029405][T11299] rcu_core+0x928/0x1390 [ 758.029420][T11299] __do_softirq+0x266/0x95a [ 758.029441][T11299] irq_exit+0x180/0x1d0 [ 758.039298][T11259] kobject: '7:0' (00000000bb5f0325): calling ktype release [ 758.044508][T11299] smp_apic_timer_interrupt+0x14a/0x570 [ 758.044521][T11299] apic_timer_interrupt+0xf/0x20 [ 758.044531][T11299] native_safe_halt+0x2/0x10 [ 758.044545][T11299] arch_cpu_idle+0x10/0x20 [ 758.044555][T11299] default_idle_call+0x36/0x90 [ 758.044576][T11299] do_idle+0x386/0x570 [ 758.049013][T11259] kobject: '7:0': free name [ 758.053466][T11299] cpu_startup_entry+0x1b/0x20 [ 758.053479][T11299] start_secondary+0x360/0x4d0 [ 758.053493][T11299] secondary_startup_64+0xa4/0xb0 [ 758.053497][T11299] [ 758.053497][T11299] to a SOFTIRQ-irq-unsafe lock: [ 758.053509][T11299] (&ctx->fault_pending_wqh){+.+.} [ 758.053518][T11299] [ 758.053518][T11299] ... which became SOFTIRQ-irq-unsafe at: [ 758.057938][T11259] kobject: 'mq' (0000000068cd39fb): kobject_uevent_env [ 758.064946][T11299] ... [ 758.064965][T11299] lock_acquire+0x16f/0x3f0 [ 758.064977][T11299] _raw_spin_lock+0x2f/0x40 [ 758.064991][T11299] userfaultfd_release+0x48e/0x6d0 [ 758.065004][T11299] __fput+0x2e5/0x8d0 [ 758.065022][T11299] ____fput+0x16/0x20 [ 758.070853][T11259] kobject: 'mq' (0000000068cd39fb): kobject_uevent_env: filter function caused the event to drop! [ 758.075680][T11299] task_work_run+0x14a/0x1c0 [ 758.075696][T11299] exit_to_usermode_loop+0x273/0x2c0 [ 758.075708][T11299] do_syscall_64+0x52d/0x610 [ 758.075721][T11299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.075725][T11299] [ 758.075725][T11299] other info that might help us debug this: [ 758.075725][T11299] 10:12:30 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:30 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 758.075728][T11299] Chain exists of: [ 758.075728][T11299] &(&ctx->ctx_lock)->rlock --> &ctx->fd_wqh --> &ctx->fault_pending_wqh [ 758.075728][T11299] [ 758.082636][T11259] kobject: 'queue' (000000000bc381bb): kobject_uevent_env [ 758.084889][T11299] Possible interrupt unsafe locking scenario: [ 758.084889][T11299] [ 758.084892][T11299] CPU0 CPU1 [ 758.084896][T11299] ---- ---- [ 758.084898][T11299] lock(&ctx->fault_pending_wqh); [ 758.084906][T11299] local_irq_disable(); 10:12:30 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 758.084909][T11299] lock(&(&ctx->ctx_lock)->rlock); [ 758.084917][T11299] lock(&ctx->fd_wqh); [ 758.084929][T11299] [ 758.084943][T11299] lock(&(&ctx->ctx_lock)->rlock); [ 758.097146][T11259] kobject: 'queue' (000000000bc381bb): kobject_uevent_env: filter function caused the event to drop! [ 758.098411][T11299] [ 758.098411][T11299] *** DEADLOCK *** [ 758.098411][T11299] [ 758.098424][T11299] 1 lock held by syz-executor.2/11299: [ 758.098428][T11299] #0: 00000000b24ec869 (&ctx->fd_wqh){....}, at: userfaultfd_read+0x27a/0x1940 [ 758.098472][T11299] [ 758.098472][T11299] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 758.103631][T11259] kobject: 'iosched' (0000000070b34a1c): kobject_uevent_env [ 758.108156][T11299] -> (&(&ctx->ctx_lock)->rlock){..-.} { [ 758.108171][T11299] IN-SOFTIRQ-W at: [ 758.108192][T11299] lock_acquire+0x16f/0x3f0 [ 758.108205][T11299] _raw_spin_lock_irq+0x60/0x80 [ 758.108221][T11299] free_ioctx_users+0x2d/0x4a0 [ 758.108245][T11299] percpu_ref_switch_to_atomic_rcu+0x3e7/0x520 [ 758.113499][T11259] kobject: 'iosched' (0000000070b34a1c): kobject_uevent_env: attempted to send uevent without kset! [ 758.120364][T11299] rcu_core+0x928/0x1390 [ 758.120380][T11299] __do_softirq+0x266/0x95a [ 758.120393][T11299] irq_exit+0x180/0x1d0 [ 758.120406][T11299] smp_apic_timer_interrupt+0x14a/0x570 [ 758.120425][T11299] apic_timer_interrupt+0xf/0x20 [ 758.125676][T11259] kobject: 'holders' (00000000df3dded0): kobject_cleanup, parent 00000000758885c9 [ 758.133393][T11299] native_safe_halt+0x2/0x10 [ 758.133408][T11299] arch_cpu_idle+0x10/0x20 [ 758.133420][T11299] default_idle_call+0x36/0x90 [ 758.133433][T11299] do_idle+0x386/0x570 [ 758.133446][T11299] cpu_startup_entry+0x1b/0x20 [ 758.133458][T11299] start_secondary+0x360/0x4d0 [ 758.133479][T11299] secondary_startup_64+0xa4/0xb0 [ 758.140473][T11259] kobject: 'holders' (00000000df3dded0): auto cleanup kobject_del [ 758.142914][T11299] INITIAL USE at: [ 758.142934][T11299] lock_acquire+0x16f/0x3f0 [ 758.142946][T11299] _raw_spin_lock_irq+0x60/0x80 [ 758.142961][T11299] free_ioctx_users+0x2d/0x4a0 [ 758.142977][T11299] percpu_ref_switch_to_atomic_rcu+0x3e7/0x520 [ 758.142999][T11299] rcu_core+0x928/0x1390 [ 758.147696][T11259] kobject: 'holders' (00000000df3dded0): calling ktype release [ 758.152141][T11299] __do_softirq+0x266/0x95a [ 758.152156][T11299] irq_exit+0x180/0x1d0 [ 758.152168][T11299] smp_apic_timer_interrupt+0x14a/0x570 [ 758.152188][T11299] apic_timer_interrupt+0xf/0x20 [ 758.157494][T11259] kobject: (00000000df3dded0): dynamic_kobj_release [ 758.161441][T11299] native_safe_halt+0x2/0x10 [ 758.161457][T11299] arch_cpu_idle+0x10/0x20 [ 758.161467][T11299] default_idle_call+0x36/0x90 [ 758.161480][T11299] do_idle+0x386/0x570 [ 758.161500][T11299] cpu_startup_entry+0x1b/0x20 [ 758.165673][T11259] kobject: 'holders': free name [ 758.176128][T11299] start_secondary+0x360/0x4d0 [ 758.176141][T11299] secondary_startup_64+0xa4/0xb0 [ 758.176145][T11299] } [ 758.176161][T11299] ... key at: [] __key.52644+0x0/0x40 [ 758.176164][T11299] ... acquired at: [ 758.176178][T11299] lock_acquire+0x16f/0x3f0 [ 758.176189][T11299] _raw_spin_lock+0x2f/0x40 [ 758.176212][T11299] io_submit_one+0xe35/0x1cf0 [ 758.181008][T11259] kobject: 'slaves' (00000000ac6b6767): kobject_cleanup, parent 00000000758885c9 [ 758.186229][T11299] __x64_sys_io_submit+0x1bd/0x580 [ 758.186244][T11299] do_syscall_64+0x103/0x610 [ 758.186259][T11299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.186261][T11299] [ 758.186264][T11299] -> (&ctx->fd_wqh){....} { [ 758.186278][T11299] INITIAL USE at: [ 758.186294][T11299] lock_acquire+0x16f/0x3f0 [ 758.186313][T11299] _raw_spin_lock_irqsave+0x95/0xcd [ 758.191118][T11259] kobject: 'slaves' (00000000ac6b6767): auto cleanup kobject_del [ 758.196959][T11299] __wake_up_common_lock+0xc7/0x190 [ 758.196971][T11299] __wake_up+0xe/0x10 [ 758.196986][T11299] userfaultfd_release+0x4ec/0x6d0 [ 758.196999][T11299] __fput+0x2e5/0x8d0 [ 758.197008][T11299] ____fput+0x16/0x20 [ 758.197020][T11299] task_work_run+0x14a/0x1c0 [ 758.197043][T11299] exit_to_usermode_loop+0x273/0x2c0 [ 758.215562][T11259] kobject: 'slaves' (00000000ac6b6767): calling ktype release [ 758.229583][T11299] do_syscall_64+0x52d/0x610 [ 758.229598][T11299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.229602][T11299] } [ 758.229617][T11299] ... key at: [] __key.45453+0x0/0x40 [ 758.229621][T11299] ... acquired at: [ 758.229634][T11299] __lock_acquire+0x239c/0x3fb0 [ 758.229644][T11299] lock_acquire+0x16f/0x3f0 [ 758.229663][T11299] _raw_spin_lock+0x2f/0x40 [ 758.236945][T11259] kobject: (00000000ac6b6767): dynamic_kobj_release [ 758.245086][T11299] userfaultfd_read+0x540/0x1940 [ 758.245101][T11299] __vfs_read+0x8d/0x110 [ 758.245112][T11299] vfs_read+0x194/0x3e0 [ 758.245123][T11299] ksys_read+0xea/0x1f0 [ 758.245136][T11299] __x64_sys_read+0x73/0xb0 [ 758.245158][T11299] do_syscall_64+0x103/0x610 [ 758.250647][T11259] kobject: 'slaves': free name [ 758.255873][T11299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.255876][T11299] [ 758.255880][T11299] [ 758.255880][T11299] the dependencies between the lock to be acquired [ 758.255885][T11299] and SOFTIRQ-irq-unsafe lock: [ 758.255894][T11299] -> (&ctx->fault_pending_wqh){+.+.} { [ 758.255907][T11299] HARDIRQ-ON-W at: [ 758.255923][T11299] lock_acquire+0x16f/0x3f0 [ 758.255942][T11299] _raw_spin_lock+0x2f/0x40 [ 758.291441][ T3875] kobject: 'nullb0' (00000000a2109cdc): kobject_uevent_env [ 758.301865][T11299] userfaultfd_release+0x48e/0x6d0 [ 758.301880][T11299] __fput+0x2e5/0x8d0 [ 758.301889][T11299] ____fput+0x16/0x20 [ 758.301901][T11299] task_work_run+0x14a/0x1c0 [ 758.301926][T11299] exit_to_usermode_loop+0x273/0x2c0 [ 758.908683][T11299] do_syscall_64+0x52d/0x610 [ 758.914932][T11299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.922454][T11299] SOFTIRQ-ON-W at: [ 758.926433][T11299] lock_acquire+0x16f/0x3f0 [ 758.932582][T11299] _raw_spin_lock+0x2f/0x40 [ 758.938737][T11299] userfaultfd_release+0x48e/0x6d0 [ 758.945493][T11299] __fput+0x2e5/0x8d0 [ 758.951115][T11299] ____fput+0x16/0x20 [ 758.956739][T11299] task_work_run+0x14a/0x1c0 [ 758.962972][T11299] exit_to_usermode_loop+0x273/0x2c0 [ 758.969907][T11299] do_syscall_64+0x52d/0x610 [ 758.976172][T11299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.983698][T11299] INITIAL USE at: [ 758.987595][T11299] lock_acquire+0x16f/0x3f0 [ 758.993662][T11299] _raw_spin_lock+0x2f/0x40 [ 758.999728][T11299] userfaultfd_release+0x48e/0x6d0 [ 759.006402][T11299] __fput+0x2e5/0x8d0 [ 759.012032][T11299] ____fput+0x16/0x20 [ 759.017585][T11299] task_work_run+0x14a/0x1c0 [ 759.023744][T11299] exit_to_usermode_loop+0x273/0x2c0 [ 759.030596][T11299] do_syscall_64+0x52d/0x610 [ 759.036753][T11299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 759.044193][T11299] } [ 759.046704][T11299] ... key at: [] __key.45450+0x0/0x40 [ 759.054150][T11299] ... acquired at: [ 759.057965][T11299] __lock_acquire+0x239c/0x3fb0 [ 759.062979][T11299] lock_acquire+0x16f/0x3f0 [ 759.067663][T11299] _raw_spin_lock+0x2f/0x40 [ 759.072342][T11299] userfaultfd_read+0x540/0x1940 [ 759.077450][T11299] __vfs_read+0x8d/0x110 [ 759.081862][T11299] vfs_read+0x194/0x3e0 [ 759.086186][T11299] ksys_read+0xea/0x1f0 [ 759.090515][T11299] __x64_sys_read+0x73/0xb0 [ 759.095198][T11299] do_syscall_64+0x103/0x610 [ 759.099961][T11299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 759.106011][T11299] [ 759.108335][T11299] [ 759.108335][T11299] stack backtrace: [ 759.114243][T11299] CPU: 1 PID: 11299 Comm: syz-executor.2 Not tainted 5.1.0-rc2+ #38 [ 759.122228][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.132357][T11299] Call Trace: [ 759.135650][T11299] dump_stack+0x172/0x1f0 [ 759.139977][T11299] check_usage.cold+0x60f/0x940 [ 759.144826][T11299] ? check_usage_forwards+0x360/0x360 [ 759.150197][T11299] ? lockdep_hardirqs_on+0x418/0x5d0 [ 759.155479][T11299] ? trace_hardirqs_on+0x67/0x230 [ 759.160494][T11299] ? kasan_check_read+0x11/0x20 [ 759.165355][T11299] ? finish_task_switch+0x146/0x780 [ 759.170551][T11299] ? finish_task_switch+0x118/0x780 [ 759.175779][T11299] ? __switch_to_asm+0x34/0x70 [ 759.180622][T11299] ? __switch_to_asm+0x40/0x70 [ 759.185384][T11299] check_prev_add.constprop.0+0x2e3/0x23c0 [ 759.191187][T11299] ? check_prev_add.constprop.0+0x2e3/0x23c0 [ 759.197172][T11299] ? check_usage+0x570/0x570 [ 759.201766][T11299] ? try_to_wake_up+0xc6/0x1000 [ 759.206637][T11299] ? preempt_schedule+0x4b/0x60 [ 759.211497][T11299] ? kasan_check_write+0x14/0x20 [ 759.216438][T11299] ? __lockdep_reset_lock+0x450/0x450 [ 759.221811][T11299] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 759.228056][T11299] ? find_first_zero_bit+0x9a/0xc0 [ 759.233949][T11299] __lock_acquire+0x239c/0x3fb0 [ 759.238809][T11299] ? mark_held_locks+0xf0/0xf0 [ 759.243578][T11299] lock_acquire+0x16f/0x3f0 [ 759.248080][T11299] ? userfaultfd_read+0x540/0x1940 [ 759.253190][T11299] _raw_spin_lock+0x2f/0x40 [ 759.257689][T11299] ? userfaultfd_read+0x540/0x1940 [ 759.262793][T11299] userfaultfd_read+0x540/0x1940 [ 759.267753][T11299] ? userfaultfd_event_wait_completion+0xa50/0xa50 [ 759.274255][T11299] ? fsnotify+0xbc0/0xbc0 [ 759.278583][T11299] ? fsnotify_first_mark+0x210/0x210 [ 759.283871][T11299] ? __fget+0x381/0x550 [ 759.288020][T11299] ? wake_up_q+0xf0/0xf0 [ 759.292265][T11299] ? security_file_permission+0x94/0x380 [ 759.297894][T11299] __vfs_read+0x8d/0x110 [ 759.302133][T11299] ? userfaultfd_event_wait_completion+0xa50/0xa50 [ 759.308631][T11299] vfs_read+0x194/0x3e0 [ 759.312789][T11299] ksys_read+0xea/0x1f0 [ 759.316937][T11299] ? kernel_write+0x120/0x120 [ 759.321692][T11299] ? do_syscall_64+0x26/0x610 [ 759.326363][T11299] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 759.332429][T11299] ? do_syscall_64+0x26/0x610 [ 759.337110][T11299] __x64_sys_read+0x73/0xb0 [ 759.342068][T11299] do_syscall_64+0x103/0x610 [ 759.346656][T11299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 759.352540][T11299] RIP: 0033:0x458209 [ 759.356429][T11299] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 759.376027][T11299] RSP: 002b:00007f3268a4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 759.384453][T11299] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 759.392422][T11299] RDX: 00000000000000d6 RSI: 00000000200000c0 RDI: 0000000000000003 [ 759.400387][T11299] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 759.408355][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3268a4f6d4 10:12:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) write(r1, &(0x7f0000000200)="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", 0x1000) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x6100, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000002640)={0x8, &(0x7f0000000040)=""/52, &(0x7f0000002580)=[{0x5, 0xc3, 0x20, &(0x7f0000000100)=""/195}, {0x7, 0x6, 0x6, &(0x7f0000000080)=""/6}, {0x6, 0xb1, 0x9, &(0x7f0000001200)=""/177}, {0x5, 0x5d, 0x0, &(0x7f00000012c0)=""/93}, {0x7fffffff, 0x77, 0x8, &(0x7f0000001340)=""/119}, {0x5, 0x1000, 0xff, &(0x7f00000013c0)=""/4096}, {0x6, 0xc3, 0x80000001, &(0x7f00000023c0)=""/195}, {0x3ff, 0x87, 0xfffffffffffffff9, &(0x7f00000024c0)=""/135}]}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x24) [ 759.416327][T11299] R13: 00000000004c3cbe R14: 00000000004d87e8 R15: 00000000ffffffff [ 759.424439][ T3875] kobject: 'nullb0' (00000000a2109cdc): fill_kobj_path: path = '/devices/virtual/block/nullb0' [ 759.442843][T11259] kobject: 'loop0' (00000000758885c9): kobject_uevent_env [ 759.450026][T11259] kobject: 'loop0' (00000000758885c9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 759.457679][ T3875] kobject: 'nullb0' (00000000a2109cdc): kobject_uevent_env [ 759.467945][ T3875] kobject: 'nullb0' (00000000a2109cdc): fill_kobj_path: path = '/devices/virtual/block/nullb0' [ 759.483120][T11222] kobject: 'kvm' (00000000809f0234): kobject_uevent_env [ 759.491306][T11222] kobject: 'kvm' (00000000809f0234): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 759.526872][T11259] kobject: 'iosched' (0000000070b34a1c): kobject_cleanup, parent (null) [ 759.536419][T11259] kobject: 'iosched' (0000000070b34a1c): calling ktype release [ 759.536893][T11222] kobject: 'kvm' (00000000809f0234): kobject_uevent_env [ 759.544026][T11259] kobject: 'iosched': free name [ 759.544928][T11259] kobject: 'loop0' (00000000758885c9): kobject_cleanup, parent (null) [ 759.551429][T11222] kobject: 'kvm' (00000000809f0234): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 759.560013][T11259] kobject: 'loop0' (00000000758885c9): calling ktype release [ 759.586456][T11259] kobject: 'queue' (000000000bc381bb): kobject_cleanup, parent (null) [ 759.596241][T11259] kobject: 'queue' (000000000bc381bb): calling ktype release [ 759.607313][T11259] kobject: 'queue': free name [ 759.612052][ T12] kobject: '0' (000000006225216d): kobject_cleanup, parent (null) [ 759.620820][T11259] kobject: 'loop0': free name 10:12:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1}, 0x8) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000940)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000980)={0x0, 0x0, 0x14}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r3, 0x8}, &(0x7f00000003c0)=0x8) ioctl$VT_RELDISP(r2, 0x5605) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x210200, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000080)={0x80, 0x1, 0xc10}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) [ 759.629682][ T3875] kobject: 'loop3' (0000000000b0735a): kobject_uevent_env [ 759.657882][ T12] kobject: '0' (000000006225216d): calling ktype release [ 759.663078][ T3875] kobject: 'loop3' (0000000000b0735a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 759.670536][ T12] kobject: '0': free name [ 759.713282][ T7752] kobject: '7:0' (00000000883ee9b8): kobject_add_internal: parent: 'bdi', set: 'devices' [ 759.723651][ T3875] kobject: 'loop1' (00000000147a6704): kobject_uevent_env [ 759.725254][ T12] kobject: 'cpu0' (00000000800d0fbb): kobject_cleanup, parent (null) [ 759.736350][ T3875] kobject: 'loop1' (00000000147a6704): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:12:32 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) restart_syscall() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f, 0xb}}, 0x20) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000001200)=0xfffffffffffffe14) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000001300)={0x90, 0x0, 0x2, {0x20000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}}, 0x90) r2 = syz_open_dev$adsp(&(0x7f0000001280)='/dev/adsp#\x00', 0x1, 0x2000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000012c0)={0x9, 0x7fff, 0x7, 0x0, 0x400, 0x97, 0xffffffffffff8be9, 0x1f, 0x7, 0x1000, 0x2, 0x78, 0x0, 0x6, 0x7, 0x0, 0x80000001, 0x1, 0x2}) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000004, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000001040)={{0x6257096c, 0x5, 0xfffffffffffffffd, 0x2, 0xd69, 0x5}, 0x9}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001240)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001100)={0x0, 0x64}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001180)={r4, 0x3ff, 0x141, 0x0, 0x20, 0x4}, &(0x7f00000011c0)=0x14) 10:12:32 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 759.758531][ T7752] kobject: '7:0' (00000000883ee9b8): kobject_uevent_env [ 759.767505][ T7752] kobject: '7:0' (00000000883ee9b8): fill_kobj_path: path = '/devices/virtual/bdi/7:0' [ 759.768845][ T12] kobject: 'cpu0' (00000000800d0fbb): calling ktype release [ 759.779859][ T3875] kobject: 'loop5' (0000000006da39b0): kobject_uevent_env [ 759.795873][ T3875] kobject: 'loop5' (0000000006da39b0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 759.804380][ T12] kobject: 'cpu0': free name 10:12:32 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 759.811251][ T7752] kobject: 'loop0' (000000007b405f71): kobject_add_internal: parent: 'block', set: 'devices' [ 759.822784][ T12] kobject: 'cpu1' (000000008556b4a9): kobject_cleanup, parent (null) [ 759.831736][ T12] kobject: 'cpu1' (000000008556b4a9): calling ktype release [ 759.834965][ T3875] kobject: 'loop4' (000000005d9b7574): kobject_uevent_env [ 759.846143][ T12] kobject: 'cpu1': free name [ 759.846161][ T12] kobject: 'mq' (0000000068cd39fb): kobject_cleanup, parent (null) 10:12:32 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 759.846168][ T12] kobject: 'mq' (0000000068cd39fb): calling ktype release [ 759.846182][ T12] kobject: 'mq': free name [ 759.863920][ T7752] kobject: 'loop0' (000000007b405f71): kobject_uevent_env [ 759.868682][ T3875] kobject: 'loop4' (000000005d9b7574): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 759.871212][ T7752] kobject: 'loop0' (000000007b405f71): kobject_uevent_env: uevent_suppress caused the event to drop! 10:12:32 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 759.915545][ T7752] kobject: 'holders' (0000000028eb5a65): kobject_add_internal: parent: 'loop0', set: '' [ 759.915763][ T3875] kobject: 'nullb0' (00000000a2109cdc): kobject_uevent_env [ 759.931540][ T7752] kobject: 'slaves' (0000000074ee7e13): kobject_add_internal: parent: 'loop0', set: '' [ 759.939391][ T3875] kobject: 'nullb0' (00000000a2109cdc): fill_kobj_path: path = '/devices/virtual/block/nullb0' [ 759.943407][ T7752] kobject: 'loop0' (000000007b405f71): kobject_uevent_env [ 759.960905][ T7752] kobject: 'loop0' (000000007b405f71): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 759.971707][ T7752] kobject: 'queue' (0000000022f1065b): kobject_add_internal: parent: 'loop0', set: '' [ 759.988169][ T7752] kobject: 'mq' (00000000871b5925): kobject_add_internal: parent: 'loop0', set: '' [ 759.998104][ T7752] kobject: 'mq' (00000000871b5925): kobject_uevent_env [ 760.004990][ T7752] kobject: 'mq' (00000000871b5925): kobject_uevent_env: filter function caused the event to drop! [ 760.015658][ T7752] kobject: '0' (00000000279be3f2): kobject_add_internal: parent: 'mq', set: '' [ 760.025180][ T7752] kobject: 'cpu0' (0000000056153827): kobject_add_internal: parent: '0', set: '' [ 760.034905][ T7752] kobject: 'cpu1' (0000000093b90a4e): kobject_add_internal: parent: '0', set: '' [ 760.045379][ T7752] kobject: 'queue' (0000000022f1065b): kobject_uevent_env [ 760.052475][ T7752] kobject: 'queue' (0000000022f1065b): kobject_uevent_env: filter function caused the event to drop! [ 760.063710][ T7752] kobject: 'iosched' (000000004a171a63): kobject_add_internal: parent: 'queue', set: '' [ 760.074056][ T7752] kobject: 'iosched' (000000004a171a63): kobject_uevent_env [ 760.081346][ T7752] kobject: 'iosched' (000000004a171a63): kobject_uevent_env: filter function caused the event to drop! [ 760.092473][ T7752] kobject: 'integrity' (00000000311fddc4): kobject_add_internal: parent: 'loop0', set: '' [ 760.102977][ T7752] kobject: 'integrity' (00000000311fddc4): kobject_uevent_env [ 760.110416][ T7752] kobject: 'integrity' (00000000311fddc4): kobject_uevent_env: filter function caused the event to drop! [ 760.136783][ T3875] kobject: 'loop2' (000000003e9fd72b): kobject_uevent_env [ 760.162010][ T3875] kobject: 'loop2' (000000003e9fd72b): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:12:32 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 760.180918][T11566] CUSE: info not properly terminated [ 760.205643][ T3875] kobject: 'loop0' (000000007b405f71): kobject_uevent_env 10:12:32 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 760.248533][ T3875] kobject: 'loop0' (000000007b405f71): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 760.301932][ T3875] kobject: 'loop4' (000000005d9b7574): kobject_uevent_env [ 760.352101][ T3875] kobject: 'loop4' (000000005d9b7574): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:12:33 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:33 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:33 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:33 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 760.421721][ T3875] kobject: 'loop5' (0000000006da39b0): kobject_uevent_env [ 760.458899][ T3875] kobject: 'loop5' (0000000006da39b0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 760.514623][ T3875] kobject: 'loop5' (0000000006da39b0): kobject_uevent_env [ 760.522642][ T3875] kobject: 'loop5' (0000000006da39b0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 760.534628][ T3875] kobject: 'loop1' (00000000147a6704): kobject_uevent_env [ 760.542213][ T3875] kobject: 'loop1' (00000000147a6704): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 760.553096][ T3875] kobject: 'loop3' (0000000000b0735a): kobject_uevent_env [ 760.562637][ T3875] kobject: 'loop3' (0000000000b0735a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 760.563216][ T3875] kobject: 'loop2' (000000003e9fd72b): kobject_uevent_env [ 760.563247][ T3875] kobject: 'loop2' (000000003e9fd72b): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 760.563612][ T3875] kobject: 'loop5' (0000000006da39b0): kobject_uevent_env [ 760.564561][ T3875] kobject: 'loop5' (0000000006da39b0): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:12:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1}, 0x8) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000940)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000980)={0x0, 0x0, 0x14}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r3, 0x8}, &(0x7f00000003c0)=0x8) ioctl$VT_RELDISP(r2, 0x5605) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x210200, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000080)={0x80, 0x1, 0xc10}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 10:12:33 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) restart_syscall() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f, 0xb}}, 0x20) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000001200)=0xfffffffffffffe14) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000001300)={0x90, 0x0, 0x2, {0x20000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}}, 0x90) r2 = syz_open_dev$adsp(&(0x7f0000001280)='/dev/adsp#\x00', 0x1, 0x2000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000012c0)={0x9, 0x7fff, 0x7, 0x0, 0x400, 0x97, 0xffffffffffff8be9, 0x1f, 0x7, 0x1000, 0x2, 0x78, 0x0, 0x6, 0x7, 0x0, 0x80000001, 0x1, 0x2}) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000004, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000001040)={{0x6257096c, 0x5, 0xfffffffffffffffd, 0x2, 0xd69, 0x5}, 0x9}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001240)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001100)={0x0, 0x64}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001180)={r4, 0x3ff, 0x141, 0x0, 0x20, 0x4}, &(0x7f00000011c0)=0x14) 10:12:33 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:33 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:33 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:33 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 760.698532][ T3875] kobject: 'loop0' (000000007b405f71): kobject_uevent_env [ 760.720650][T12005] CUSE: info not properly terminated [ 760.720780][ T3875] kobject: 'loop0' (000000007b405f71): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:12:33 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) restart_syscall() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f, 0xb}}, 0x20) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000001200)=0xfffffffffffffe14) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000001300)={0x90, 0x0, 0x2, {0x20000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}}, 0x90) r2 = syz_open_dev$adsp(&(0x7f0000001280)='/dev/adsp#\x00', 0x1, 0x2000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000012c0)={0x9, 0x7fff, 0x7, 0x0, 0x400, 0x97, 0xffffffffffff8be9, 0x1f, 0x7, 0x1000, 0x2, 0x78, 0x0, 0x6, 0x7, 0x0, 0x80000001, 0x1, 0x2}) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000004, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000001040)={{0x6257096c, 0x5, 0xfffffffffffffffd, 0x2, 0xd69, 0x5}, 0x9}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001240)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001100)={0x0, 0x64}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001180)={r4, 0x3ff, 0x141, 0x0, 0x20, 0x4}, &(0x7f00000011c0)=0x14) [ 760.790943][ T3875] kobject: 'loop1' (00000000147a6704): kobject_uevent_env [ 760.853104][ T3875] kobject: 'loop1' (00000000147a6704): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:12:33 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:33 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 760.903984][ T3875] kobject: 'loop3' (0000000000b0735a): kobject_uevent_env [ 760.911233][ T3875] kobject: 'loop3' (0000000000b0735a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 760.934333][ T3875] kobject: 'loop4' (000000005d9b7574): kobject_uevent_env 10:12:33 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 760.955988][ T3875] kobject: 'loop4' (000000005d9b7574): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 761.037681][ T3875] kobject: 'loop2' (000000003e9fd72b): kobject_uevent_env [ 761.075481][ T3875] kobject: 'loop2' (000000003e9fd72b): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:12:33 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 761.087800][ T3875] kobject: 'loop5' (0000000006da39b0): kobject_uevent_env [ 761.089352][T12240] CUSE: info not properly terminated [ 761.095443][ T3875] kobject: 'loop5' (0000000006da39b0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 761.096856][ T3875] kobject: 'loop3' (0000000000b0735a): kobject_uevent_env [ 761.122608][ T3875] kobject: 'loop3' (0000000000b0735a): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:12:33 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 761.137346][ T3875] kobject: 'loop4' (000000005d9b7574): kobject_uevent_env [ 761.144904][ T3875] kobject: 'loop4' (000000005d9b7574): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 761.163076][ T3875] kobject: 'loop5' (0000000006da39b0): kobject_uevent_env [ 761.176070][ T3875] kobject: 'loop5' (0000000006da39b0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 761.202519][ T3875] kobject: 'loop1' (00000000147a6704): kobject_uevent_env [ 761.210579][ T3875] kobject: 'loop1' (00000000147a6704): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:12:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1}, 0x8) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000940)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000980)={0x0, 0x0, 0x14}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r3, 0x8}, &(0x7f00000003c0)=0x8) ioctl$VT_RELDISP(r2, 0x5605) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x210200, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000080)={0x80, 0x1, 0xc10}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 10:12:33 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:33 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:33 executing program 2: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:33 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 761.320419][ T3875] kobject: 'loop2' (000000003e9fd72b): kobject_uevent_env [ 761.345318][ T3875] kobject: 'loop2' (000000003e9fd72b): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:12:34 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:34 executing program 2: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 761.407787][ T3875] kobject: 'loop0' (000000007b405f71): kobject_uevent_env [ 761.446906][ T3875] kobject: 'loop0' (000000007b405f71): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 761.482810][ C1] net_ratelimit: 10 callbacks suppressed [ 761.482819][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 761.493290][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 761.494344][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 761.500259][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 761.505820][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 761.511979][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 761.517222][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:12:34 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) 10:12:34 executing program 2: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 761.523179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 761.535877][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 761.542040][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 761.566981][ T3875] kobject: 'loop5' (0000000006da39b0): kobject_uevent_env 10:12:34 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:34 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) [ 761.631381][ T3875] kobject: 'loop5' (0000000006da39b0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 761.662220][ T3875] kobject: 'loop2' (000000003e9fd72b): kobject_uevent_env [ 761.699116][ T3875] kobject: 'loop2' (000000003e9fd72b): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:12:34 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") 10:12:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1}, 0x8) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000940)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000980)={0x0, 0x0, 0x14}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r3, 0x8}, &(0x7f00000003c0)=0x8) ioctl$VT_RELDISP(r2, 0x5605) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x210200, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000080)={0x80, 0x1, 0xc10}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 10:12:34 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) close(0xffffffffffffffff) [ 761.776931][ T3875] kobject: 'loop4' (000000005d9b7574): kobject_uevent_env [ 761.804125][ T3875] kobject: 'loop4' (000000005d9b7574): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:12:34 executing program 2: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) [ 761.829109][ T3875] kobject: 'loop2' (000000003e9fd72b): kobject_uevent_env [ 761.849742][ T3875] kobject: 'loop2' (000000003e9fd72b): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 761.867075][ T3875] kobject: 'loop3' (0000000000b0735a): kobject_uevent_env 10:12:34 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) close(0xffffffffffffffff) 10:12:34 executing program 2: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) [ 761.877017][ T3875] kobject: 'loop3' (0000000000b0735a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 761.898688][ T3875] kobject: 'loop1' (00000000147a6704): kobject_uevent_env 10:12:34 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:34 executing program 5: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) recvmmsg(r0, &(0x7f0000001540), 0x0, 0x0, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") [ 761.932879][ T3875] kobject: 'loop1' (00000000147a6704): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 761.959059][ T3875] kobject: 'loop4' (000000005d9b7574): kobject_uevent_env 10:12:34 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) epoll_create1(0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x400, 0x0, 0xff}}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) 10:12:34 executing program 2: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, 0x2c) timerfd_gettime(r3, &(0x7f00000001c0)) pipe(0x0) 10:12:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1}, 0x8) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000940)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000980)={0x0, 0x0, 0x14}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r3, 0x8}, &(0x7f00000003c0)=0x8) ioctl$VT_RELDISP(r2, 0x5605) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x210200, 0x0) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000080)={0x80, 0x1, 0xc10}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="66696c7465f3285b37b29d1926000000000000000000000000000000000006000000000000000000c803000038020000480100004801000038020000380200002803000028030000280300002803000028030000040000000000000000000000000000000000000000000000f92c05a497f3b2adda000000000000000000000000000000000000000000000000000000000000000000000000ff01000000000000000000000000000000000000000000000000000000000000000000000000000000277fdd65422eeac6600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000130000000000000000000000000000000000002800686c00b2e57b0000000000000000000000000000000000000000000000da440000030500000000000028004e465155455545000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000100000000000000000000000000000001ffffffff000000ffffffffffff000000ffffff0000000000fffffff9ff0000006e7230000000000000000000000000006e723000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000540000000000000000000000000000000c800f00000000000000000000000000000000000000000000000000028000000000000003d6d0505d9bf5d43d5854d97e5a9de7d5d847e317e0e000000000000000000000000000000000000000000000000380200000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000ff000000ffffffff0000ffff0000ff0000000000000000766c616e30000000000000000000000069703667726574617030000000000000000000060000000000ff00000000000000000000000400000000001a000000000000000000000000000000000000000000000000000000008800f40409000000000000000000000000000000729aa2a8819bf01400000000000000000000000000000000000000002800"], 0x1) 10:12:34 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) close(0xffffffffffffffff) [ 761.998670][ T3875] kobject: 'loop4' (000000005d9b7574): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 762.048381][ T3875] kobject: 'loop0' (000000007b405f71): kobject_uevent_env [ 762.057773][ T3875] kobject: 'loop0' (000000007b405f71): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 762.080650][ T3875] kobject: 'loop2' (000000003e9fd72b): kobject_uevent_env 10:12:34 executing program 3: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000020000000040000000000000000000070a1eb202c0235ee430c8fa3baa1e4f79520ce9ca5590d6b8fe7e9e9552b8308c54cc1fc4728a7f9d8940cc660414fa746d5de7c6116e8d21cf700000000000000000000000000000000000000008e"], 0x1}}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000003400)='/dev/vcsa#\x00', 0x6, 0xa040) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r4, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) close(r5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 10:12:34 executing program 4: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)) pipe(0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4000000150000042abd7000fcdbdf256362632d63617374352d617678000000000000000000000000000000000000000000000000000000000000000000000000