, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x9400) 14:18:21 executing program 0: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000100)=':\xa0e\x99C\xe9u%\x0eZ\x8a\x16\tS\t\xd5\x1f\x9e\xaf\xd2\xed\xe8\x16\x94\xe6p\xf1)\xdc\xec\xfb\vR\x9c==\x952\x82:\xf7\xd2\x8c\xee\xa4\xc6\x11nm\xda\xfc5\xcaq\xf1G\xc9G\x93\x8eO2\xdf.\x1c\x93\xe2\xba\x84\xabVD\xe1\x0e\f\xee\x8d\xbbU\xc3Y0T\xaa\x9a') mq_timedreceive(r3, 0x0, 0x0, 0x0, 0x0) 14:18:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c65300abe2a57339966e48f2c5abf66f3d42e1f44695f94"], 0x29fa0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d}, 0x9c) 14:18:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 14:18:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000740)=@acquire={0x128, 0x17, 0x801, 0x0, 0x0, {{@in=@local}, @in=@empty, {@in6=@mcast1, @in=@multicast2}, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}}}, 0x128}}, 0x0) 14:18:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x3}}, 0x2e) ioctl$PPPIOCGFLAGS(r3, 0x80487436, 0x0) 14:18:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 14:18:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast2}}) [ 368.036166][ C1] sctp: protocol violation state 1 chunkid 5 14:18:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) sendfile(r1, r0, &(0x7f0000000000)=0x6, 0x1) mq_timedreceive(r0, 0x0, 0x2f2, 0x0, 0x0) 14:18:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400ff05000000200000000010000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200001e000000000000800008000bf9ff0000fb0310290000000c000b000000000000020000140006000000f0c50000000050bad365f4f4626a6a6a190000040100829e30a958be0200d3889c0d048000000000"], 0x6c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 14:18:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1007, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 14:18:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000080)="f3aa2420ce98", 0x6}, {&(0x7f00000000c0)="58c95b75e84a162c31d18d854bcae910370a9e23180bfda20358ee51343e5db886837349840db7ed40d1f338687432fca49ab8d3", 0x34}, {&(0x7f0000000100)="bde650fd3b2745d1a924df5a557b112be7605cf4c155506cbd44bbb8260505fa58b820a7b317e5cc5efbd3e6ddae63c22ce40a7b3fabb5aeb4cc368826b27c48245686e5e58a7aa5b812bf52c839", 0x4e}, {&(0x7f0000001480)="a688413d3ffe847767ee1c723b80be145c44ee9d6c571add9a56b0e8c2ccbc9564a736c51dbdd65d6ba54a20abf93af13bd519bd48c0d79dde8f9b19763f821c133d0d6ed1dcbfb44b3ff6893aa16492f7ceb9b863115354949ecec9f5ba67e1233828a705ee805552c33eeff0e2b26c4c008dc5c4bc7536587289666b3c11004481032d4451668d1a3c91d8eb382c401117029525f749e503e1509bb3b1f38acb49ed81cd9321af5088a835bfa61aaf6b3d49fcb44dbeef93a54f0a7d54", 0xbe}, {&(0x7f0000000240)="1ec65f4ff53b177510da6a9bbce46f52e445aa35ebfb6d1b94fba36ebab3a0d78144d78ffcc3c1532a9149f4fcf1e41bff5059bb829dfff00e90b83ceca7aaff4fe5e3193e708132b62d0ac57b9a9c1e3698f736d9f67bc3dd45ed2af9d6a11bf798f0c1268ae3e1eddc007a24882d589cd1778bb45fc506213c07d564c31e86f9521cac4a6adb633e92d0dc26d908fc7bd56e1c16909e53094d69950aa0cedac525271a4f9089bfac9d2f235571de5ea91e65c28d19593dbb99d5c06ed4d363bccab78d72f441", 0xc7}, {&(0x7f0000000340)="b6b53306b8b51bb46fe29e21be4cfff4ab84a4ff45027166187456d020ad3a0850a7d5c2babc335f27356c373eb4dfc9dabda77601f0b73804ae45a2aad5ddbe5ee81373ecbb8ae281e8f9ca99b4b8ffbba414504f403a85cf2b3cdfa5923c6294cce1ef0c6933f72c22a628f492e0afdc14dd0c28eeb9236865b824a057df60c5f699a42e2e739969f0d12cb15226ee967ff7773f37d60992218496ddcbc1186d33fca3fa81764c1401ec0dea3fd6ae3151e7e1cde811c2d77d850d17e6ae", 0xbf}, {&(0x7f0000000400)="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", 0x1000}], 0x7) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) 14:18:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x8e, 0x0, 0x0) 14:18:22 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9a, &(0x7f0000000000), &(0x7f00000000c0)=0x2bf) 14:18:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x20600) sendmsg(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000000200)=@generic={0x0, "7a5e5c0cd1a76426ddd3f2539068153ff3965a29703165db6fac85835f11903d96fa71cb17301b9107b8640959f0f0e0764980c567f62a45f130510c9f732c323ee481cd5fafd10be8f3b4f3d64fcf3c8c8a225033710962d9fbea7039e7eeb623fe572e7661ac50ea711d3d5d943f2f80760d9279b7c431d94f04f2c372"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f0000000280)="4153e6bd51c362151d76402ed292f4e6edbe151e93b25786ff4af29a3fa8f5909e35bc23cc6cbb61bc11e85be4d79db4a35716b2e6e584a6a2a1f9e06cbaeb2fddbf1d2d25ba7083cd920f9b91153396a4302441b28010406e0fef642a12b472c70a0fbd1f0227e3ed44391382cd081c6e278aef5a4d1eb75f3eb846", 0x7c}, {&(0x7f0000000340)="ee72f06d972dc5ff80731840ae5ef874078b65d9b74059a7deb9e65c2a73618f71e2f90219b0c8088b44572a5fdade960dd3db92d8ec83ff6239177aaf9112b65afe6bbe693cd97af452f5fd68c92e4e739baf9633d6436bca93d51ab190d1de3e845bca0c3f08dd60eb93a26deb0e8a6e1692e5fc277f14a8fe460498e3366989347e64b131a06f2af2c3cd90885914c307c266cbd0f3c289f8e797c8a19ca909bdd6e9032c9877a8be035289eb6438866da8e1592d41", 0xb7}], 0x3, &(0x7f0000000440)=[{0xf0, 0x0, 0x0, "b2c4defbcfd4ecc50a92061b5f03ec52f55130382f6d8a07cea029f30b3c7541b6080f72c89bd495d4d56fc08bd968ef6e130a9b5a9a2caabc46ab586cf17d23131bbb64dfc6557bd6f72113b79c378dad3505e77b9b82762f7f740f43e8f7cc484807cd90a69e7bd1a518338135a3a4e28c4ac3711f35311af21b7c26cf676b4c769515f8ba43415672e865dbd310168b14b6cd2befc8a96bb121ed5b971e6ad94a21340fbf22c085ab579bc2263d2fd6e4380b2d23c66cc091fc8935398d4116b4a25d89b03568ece355d2b1078bc68ff24f2c44d2b22345"}, {0x20, 0x0, 0x0, "227803d56a38b6e297"}, {0x1010, 0x118, 0x1, "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"}, {0x1010, 0x108, 0x8, "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"}, {0x10, 0xff, 0x1}, {0x20, 0x112, 0xc3, "29ab8ab0c9aea84f5e96e111da30ee"}, {0xe8, 0x108, 0xdbc3, "fd43065c492e8ce49922864d005958fe3ae573208e683f4ff0c40721cbbdba2f7d6ac6a244b19b7d7654a8e66d0d4daca60bb1b3d65cbb41f32075bd39672faf99c34c664734e831b54a417fe1ad2905c541ba08243201325dea071f9e49c059c0251eb303a1d4c23132421e4d1cd45db8e646151ae65ccea805e4c31072359835346265b0047765e40e0baf48d474f8320b14f1b2095ae1f2f1ff409e4652013fb70aacb9e694507efa32317051c983063195a52176a5fc2b6526663698996c8622798aad5a1a2ccc9474ac41f02b5563326862518cc8"}], 0x2248}, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000f1, 0x0, 0x0, 0x0) 14:18:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x204, r1, 0x106, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsf0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9602}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x84}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbe25}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a73}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d17}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x808d}, 0x4000010) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x0, 'cpu'}]}, 0x5) fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r4) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000080)=0x75ae) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7, 0x1000}, 0x4) 14:18:22 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0xb1a}, 0x1c) 14:18:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1007, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 14:18:22 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9a, &(0x7f0000000000), &(0x7f00000000c0)=0x2bf) 14:18:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1a001000044}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe5e, 0x10, 0x0}, 0x70) 14:18:23 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9a, &(0x7f0000000000), &(0x7f00000000c0)=0x2bf) 14:18:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400ff05000000200000000010000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200001e000000000000800008000bf9ff0000fb0310290000000c000b000000000000020000140006000000f0c50000000050bad365f4f4626a6a6a190000040100829e30a958be0200d3889c0d048000000000"], 0x6c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 14:18:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1007, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 14:18:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x40, 0x4) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) write$FUSE_DIRENT(r0, &(0x7f0000000100)={0xe8, 0x0, 0x7, [{0x6, 0xffffffffffffff80, 0xb, 0x0, 'nolazytime\x00'}, {0x4, 0x7, 0xa, 0x4e6, 'eth1bdev!.'}, {0x2, 0x40, 0xb, 0x2, 'nolazytime\x00'}, {0x2, 0x9, 0x0, 0x5}, {0x0, 0x8, 0xb, 0x81, 'nolazytime\x00'}, {0x4, 0xa732, 0x1, 0x7, '!'}]}, 0xe8) 14:18:23 executing program 4: clock_settime(0xfffffffffffffff1, &(0x7f0000000100)) 14:18:23 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9a, &(0x7f0000000000), &(0x7f00000000c0)=0x2bf) 14:18:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1007, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 14:18:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x46c00) 14:18:23 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='vm$s\xfb\xf1+}\x93\xd7\xb6f\xbf\xc8;net0,\'$eth1*,md5sum%wlan0\x00', 0x0) write(r0, &(0x7f0000000100)="90ef1291", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000000)) 14:18:24 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@echo_reply={0xd}}}}}, 0x0) 14:18:24 executing program 0: r0 = socket$inet(0x2, 0xa, 0x98) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) pipe(&(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0x1, 0x4) fstat(r0, &(0x7f0000000000)) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) 14:18:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x8400, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x200, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000300)={0x10201, 0x2, 0x963e836b65326ff, 0x1000, &(0x7f00008dc000/0x1000)=nil}) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000080)=ANY=[@ANYBLOB="85416fa11bda94ea"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) msgrcv(0x0, &(0x7f0000001a80)={0x0, ""/4096}, 0x1008, 0x0, 0x0) 14:18:24 executing program 4: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') lseek(r0, 0x2, 0x0) [ 370.202239][T14130] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 14:18:24 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), 0x8) 14:18:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_misc(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14a) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x2c7) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x81, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSISO7816(r7, 0xc0285443, &(0x7f00000001c0)={0x7, 0x5, 0x5, 0x3, 0x350}) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f00000005c0)=0x3, &(0x7f0000000600)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0x7, 0x2, 0xfffffffd}}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 14:18:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400ff05000000200000000010000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200001e000000000000800008000bf9ff0000fb0310290000000c000b000000000000020000140006000000f0c50000000050bad365f4f4626a6a6a190000040100829e30a958be0200d3889c0d048000000000"], 0x6c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 14:18:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x8}, 0x90) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300), 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x18}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 370.809820][ C0] sd 0:0:1:0: [sg0] tag#1236 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 370.819693][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB: Test Unit Ready [ 370.826454][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.836457][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.846480][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.856630][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.866552][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.876478][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.886878][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.896674][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.906489][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.916492][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.926361][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.936408][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.946192][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.956099][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 370.965949][ C0] sd 0:0:1:0: [sg0] tag#1236 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:18:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) 14:18:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r3 = getpgrp(r1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x3, 0x401, 0xfff, 0x5, 0x7, r3}) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x141000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80000, 0x0) setresuid(0x0, r5, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) fchown(r4, r5, r6) 14:18:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) r5 = dup2(r0, r2) dup3(r5, r1, 0x0) 14:18:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x5, 0x1, 0x0, 0xfffffffc}) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000100)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='VeT{\x0e\x00\x00\x00\x00\x00\x00\xe7t\x89\x02\xac\x9a\xf9\xbd\xf1Y+\xb0_\xc0\'/\xbf\x93ug\x85\xed;`\x10\x85\xbf!2>\xaa# OSt\f\x11v\xdb\x9f\x84\x96\x9f\'\x832\x97\x95\x9f\r\x9fZ\x80\xcc\x1e\x95#F-\xb8\xf4rly\xa0\x00'/96, 0xffffffffffffff69) 14:18:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1) 14:18:25 executing program 3: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r0, 0x0, 0x2}) 14:18:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = userfaultfd(0x0) poll(&(0x7f0000000200)=[{r0}, {r1}], 0x2, 0x0) 14:18:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1) 14:18:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0xa9, 0x0, [], {0x0, @bt={0x5, 0xb9, 0x0, 0x1, 0xfffffffffffffffa, 0x200, 0x3, 0x2, 0x6, 0x80000001, 0x0, 0x0, 0xffffffff, 0x8, 0x8}}}) 14:18:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{}, {}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 14:18:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1) 14:18:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1) 14:18:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000000)=""/225) 14:18:26 executing program 3: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r0, 0x0, 0x2}) 14:18:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB='7:2\t'], 0x4) 14:18:26 executing program 1: connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x80000, 0x88) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x3fbf595fb9fbf06, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @loopback}, 0x6e5, 0x2, 0x0, 0x8, 0x2, 0x4}, 0x20) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) 14:18:26 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x88101) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000040)) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000200)="dd", 0x1}], 0x1) 14:18:26 executing program 3: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r0, 0x0, 0x2}) 14:18:26 executing program 0: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(r0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000000)={0xffff, 0x1, 0x0, 0x1}) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) 14:18:26 executing program 3: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r0, 0x0, 0x2}) 14:18:26 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 14:18:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x81}], 0x1c) r6 = dup2(r3, r5) dup3(r6, r4, 0x0) 14:18:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x8, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x1, 0x3003}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000000)) 14:18:27 executing program 5: r0 = socket$inet6(0xa, 0x400000000005, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@remote}}, 0xe8) close(r1) 14:18:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delrule={0x28, 0x21, 0x101, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x28}}, 0x0) 14:18:27 executing program 1: unshare(0x24020400) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0) 14:18:27 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x40002014}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 14:18:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) close(r3) pipe(&(0x7f0000000100)) splice(r1, 0x0, r3, 0x0, 0xc0, 0x0) 14:18:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29) 14:18:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x81}], 0x1c) r6 = dup2(r3, r5) dup3(r6, r4, 0x0) 14:18:27 executing program 5: keyctl$chown(0x4, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 14:18:27 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/176, 0x0, 0x800}, 0x18) 14:18:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0x2, 0x0, 0x0, @remote}}}, 0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r3, 0x40}, 0x8) r5 = msgget(0x1, 0x302) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000000)=""/61) 14:18:27 executing program 3: r0 = add_key$user(&(0x7f00000007c0)='user\x00', &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840)='K', 0x1, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000880)='syzkaller\x00', &(0x7f00000008c0)={'syz', 0x3}, 0x0) 14:18:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x81}], 0x1c) r6 = dup2(r3, r5) dup3(r6, r4, 0x0) 14:18:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffffffae, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) 14:18:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0xfffffffffffffff2, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x500) 14:18:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000240)=0xc) 14:18:28 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000880)='logon\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="e3", 0x1, r0) 14:18:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x81}], 0x1c) r6 = dup2(r3, r5) dup3(r6, r4, 0x0) 14:18:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') exit(0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1, 0x0) 14:18:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="c461f92b232e66f30fc7fb81a4e5000000007d2f0000c744240086000000c744240200000000ff1c24c463f5420c3200c461a155388f28189e730800b9800000c00f3235010000000f30ec66b81b008ee8", 0x51}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:18:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') exit(0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1, 0x0) 14:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000300)={0x7b, 0x5, [0x40000082], [0xc1]}) 14:18:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x561001, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 14:18:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653f0d89abf4d209bc876003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab3", 0x4a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x386}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 14:18:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0xefb}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0xcc}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:18:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') exit(0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1, 0x0) 14:18:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x0, 0xffffffff, 0x2, {0x2, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @raw_data="9e7b5b871e9bc81652474252384bb0caf394d5b3c52866efd54a2be632ae793061a240154b28a9fe06ab168b4d045033d4257d6819cb8a7fc2a4924d9b2c43950e1f6e1b8f4ccfce2e9f52136728792ded2e4525a2b608dbd5127c80970a30a0b5486dc987157ff0352d086ab6604aae291e5badc8745251b411905cdc64b2cd39e6428a6ee6abb995fe1754bd7a3aa5beb328640bb285eb521922d354d2079a482ef690b56c273ffe367c4e6c38a4684b3d1366477c412bcdb7a4adebb3d0c56f08e908fa4f5155"}) [ 375.020207][T14350] kvm: pic: non byte read [ 375.046477][T14350] kvm: pic: non byte write 14:18:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x9e/\xd2Si+\x88\x0e\xe5\x8dZ\x95\xae\xb7(\x17kB\xadAw\x016\x87\x97\x85\xc2)U\xbc\xdf\xad\xb5>\x13\x1f\xf9\xe0\xa8\xcb\xb1\xfb\xb9\x8eg\xe8~\x12\xce\xec9\x9dP\xb4\xd3\x13\v4\x1aG\xe9\xbe\xdb\xf9\xfc0{-\xff/\xa8oU\xca\x86;\xe7\xb7\x8a\xbb\"\x1a\xca\\r\xd2\x89i\xd2\xc5w\xbcb\x1c2\xf9M2\"x\x1a\x01\xe9\xc44\xed\x13\x8e\xc1\x92\xea\xb2R\x04)\x9b\x05F\xf4\xf8-J\x8c\xf7k\xa2\xeb\xb2hU\xb7\x8e\v4P\x84\x05\xa30\xa6UfM\x02yJ\v\xa1\xf9W$\x1cDR\x80\xd2\x19\xd9\xf4\xd3s\xb7\xa3\x85\x18\x94\xac\x06E\x9c\x05\xaf\xb3\r\x86\x97\xa7&Y\xf3\x9et\x9a\x8aC_\t\xab/D)\xb1\x13\x8a\xab\x8c\x16y6%\x91\xf8\"\xd8\xf7\xc2bU\x91\x01\xb4\xb2D\x7fPZ\x86\xb2C\x01Q1\xc1\x15\x93\x10\xeaRj\xc4\xa7\x1b\xdb\x1e\xeb\xd2\x10') ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000100)=""/197) mq_timedreceive(r0, 0x0, 0xffffffffffffffdd, 0xfff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80) [ 375.079308][T14350] kvm: pic: non byte read [ 375.099478][T14350] kvm: pic: non byte write [ 375.126147][T14350] kvm: pic: non byte read [ 375.131104][T14350] kvm: pic: non byte write [ 375.145693][T14357] vim2m vim2m.0: vidioc_s_fmt queue busy 14:18:29 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') exit(0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1, 0x0) [ 375.168348][T14350] kvm: pic: non byte read [ 375.173963][T14350] kvm: pic: non byte write [ 375.182437][T14358] vim2m vim2m.0: vidioc_s_fmt queue busy [ 375.193916][T14350] kvm: pic: non byte read [ 375.198916][T14350] kvm: pic: non byte write [ 375.253816][T14350] kvm: pic: non byte read [ 375.267146][T14350] kvm: pic: non byte write [ 375.293611][T14350] kvm: pic: non byte read 14:18:29 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{0x801}, {0x801, 0x0, 0x2000000000000}]}) [ 375.345621][T14350] kvm: pic: non byte write [ 375.361503][T14350] kvm: pic: non byte read [ 375.412251][T14350] kvm: pic: non byte write [ 375.446328][T14350] kvm: pic: non byte read [ 375.454552][T14350] kvm: pic: non byte write 14:18:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000002000)) [ 375.492003][T14350] kvm: pic: non byte read [ 375.515906][T14350] kvm: pic: non byte write [ 375.611057][T14350] kvm: pic: single mode not supported 14:18:29 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{0x801}, {0x801, 0x0, 0x2000000000000}]}) 14:18:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r2}}, 0x1b5) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)) mq_timedreceive(r3, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) 14:18:29 executing program 5: syz_emit_ethernet(0xc0, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x2f}], "020088beffff0000"}}}}}}}, 0x0) 14:18:30 executing program 5: syz_emit_ethernet(0xc0, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x2f}], "020088beffff0000"}}}}}}}, 0x0) 14:18:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000006902000000000000040000000022"]) 14:18:31 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{0x801}, {0x801, 0x0, 0x2000000000000}]}) 14:18:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) pause() accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) fsetxattr$security_smack_transmute(r2, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000180)=""/4096, &(0x7f0000000100)=0x1000) fchdir(r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x703, 0x100) ioctl$FICLONE(r3, 0x40049409, r4) 14:18:31 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x33c, 0xffffc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], 0x1a1) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) r6 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x14004984) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r5, 0x200000000002) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000004c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x7e0fdecf, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x3, @empty, 0x100000000}, @in={0x2, 0x4e21, @local}], 0x68) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000003c0)={0x800, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x3, 0x1}) signalfd4(r4, &(0x7f0000000100)={0xffffffffffffffff}, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, r3, 0x0, 0x0) dup(0xffffffffffffffff) 14:18:31 executing program 5: syz_emit_ethernet(0xc0, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x2f}], "020088beffff0000"}}}}}}}, 0x0) 14:18:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r5 = syz_open_procfs(r3, &(0x7f0000000080)='\xb4') listen(r5, 0x0) 14:18:32 executing program 5: syz_emit_ethernet(0xc0, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x2f}], "020088beffff0000"}}}}}}}, 0x0) 14:18:32 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{0x801}, {0x801, 0x0, 0x2000000000000}]}) 14:18:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)) listen(0xffffffffffffffff, 0x0) 14:18:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x5f]}, 0x3c) 14:18:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) close(r0) 14:18:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) listen(0xffffffffffffffff, 0x0) 14:18:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f00000004c0)={{0x0, 0x0, @identifier="d10eda88991b22200ad4cae97a98f060"}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0)=0x3f, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000480)=0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$sock_int(r10, 0x1, 0x1e, &(0x7f0000000140)=0x466b, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r11, r4, 0x0) write$P9_RATTACH(r4, &(0x7f00000001c0)={0xffffffffffffff92}, 0x14) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0xd8, 0x7, @buffer={0x0, 0xc4, &(0x7f0000000200)=""/196}, &(0x7f0000000300)="188b043cc493001b06459351a8d47509f1b9127f8dea223b52c3ab29c414c423ffb3c99f22036d1fb8cd7e013ff0b0469f66df7e60db8377f65aa4de0691f0bd68d8a0a8d89d8b91d1b07fb420845f483e88750bc78b69bb27e29f4c177fe7c3ded23a0624a92e11a33a91dd2c8980b7ec9c0cef5d28b0604d618a8fd3ac707f2039ac50a77cebc1e5c5418def78bdb6137ace4f3a1d7430392a1c9f9ac155d9a0446fabfa9b7179f7fb184dd085a944cf6cb247533b7c2b676633f23a8a52c92cd369a46e03e8df43a9ad198f1400662dfb3d19f2e15407", &(0x7f0000000040)=""/22, 0x8, 0x10030, 0x0, &(0x7f0000000080)}) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, 0x0) 14:18:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "ee4700", 0x18, 0x77, 0x0, @dev, @local, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffff0a000000}}}}}}}, 0x0) [ 375.611073][T14350] kvm: pic: level sensitive irq not supported 14:18:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 14:18:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000000000)="8d033362e724fb5ec4a610519528e325734e80b4158d9d0c") 14:18:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x20, r1, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x20}, 0x1, 0x4000000}, 0x0) 14:18:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETAF(r1, 0x5402, 0x0) 14:18:33 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x450300, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000080)={0x4, 'nr0\x00', 0x1}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x2, 0x8) 14:18:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f00000004c0)={{0x0, 0x0, @identifier="d10eda88991b22200ad4cae97a98f060"}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0)=0x3f, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000480)=0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$sock_int(r10, 0x1, 0x1e, &(0x7f0000000140)=0x466b, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r11, r4, 0x0) write$P9_RATTACH(r4, &(0x7f00000001c0)={0xffffffffffffff92}, 0x14) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0xd8, 0x7, @buffer={0x0, 0xc4, &(0x7f0000000200)=""/196}, &(0x7f0000000300)="188b043cc493001b06459351a8d47509f1b9127f8dea223b52c3ab29c414c423ffb3c99f22036d1fb8cd7e013ff0b0469f66df7e60db8377f65aa4de0691f0bd68d8a0a8d89d8b91d1b07fb420845f483e88750bc78b69bb27e29f4c177fe7c3ded23a0624a92e11a33a91dd2c8980b7ec9c0cef5d28b0604d618a8fd3ac707f2039ac50a77cebc1e5c5418def78bdb6137ace4f3a1d7430392a1c9f9ac155d9a0446fabfa9b7179f7fb184dd085a944cf6cb247533b7c2b676633f23a8a52c92cd369a46e03e8df43a9ad198f1400662dfb3d19f2e15407", &(0x7f0000000040)=""/22, 0x8, 0x10030, 0x0, &(0x7f0000000080)}) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, 0x0) 14:18:33 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x33c, 0xffffc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], 0x1a1) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) r6 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x14004984) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r5, 0x200000000002) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000004c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x7e0fdecf, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x3, @empty, 0x100000000}, @in={0x2, 0x4e21, @local}], 0x68) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000003c0)={0x800, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x3, 0x1}) signalfd4(r4, &(0x7f0000000100)={0xffffffffffffffff}, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, r3, 0x0, 0x0) dup(0xffffffffffffffff) 14:18:33 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x33c, 0xffffc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], 0x1a1) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) r6 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x14004984) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r5, 0x200000000002) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000004c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x7e0fdecf, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x3, @empty, 0x100000000}, @in={0x2, 0x4e21, @local}], 0x68) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000003c0)={0x800, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x3, 0x1}) signalfd4(r4, &(0x7f0000000100)={0xffffffffffffffff}, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, r3, 0x0, 0x0) dup(0xffffffffffffffff) 14:18:33 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 14:18:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)) fchdir(r1) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7f, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x8, 0x9}) mq_open(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x23, &(0x7f0000000100)={0x8000, 0x8, 0x61535a4f, 0xff, 0xfffffffffffffff8, 0x3, 0x9, 0x9}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) clone3(&(0x7f0000000440)={0x80000000, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), 0x19, 0x0, &(0x7f0000000240)=""/216, 0xd8, &(0x7f0000000340)=""/200}, 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)) fchdir(r4) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000180)) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f00000000c0)) listen(r0, 0x0) 14:18:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f00000004c0)={{0x0, 0x0, @identifier="d10eda88991b22200ad4cae97a98f060"}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0)=0x3f, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000480)=0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$sock_int(r10, 0x1, 0x1e, &(0x7f0000000140)=0x466b, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r11, r4, 0x0) write$P9_RATTACH(r4, &(0x7f00000001c0)={0xffffffffffffff92}, 0x14) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0xd8, 0x7, @buffer={0x0, 0xc4, &(0x7f0000000200)=""/196}, &(0x7f0000000300)="188b043cc493001b06459351a8d47509f1b9127f8dea223b52c3ab29c414c423ffb3c99f22036d1fb8cd7e013ff0b0469f66df7e60db8377f65aa4de0691f0bd68d8a0a8d89d8b91d1b07fb420845f483e88750bc78b69bb27e29f4c177fe7c3ded23a0624a92e11a33a91dd2c8980b7ec9c0cef5d28b0604d618a8fd3ac707f2039ac50a77cebc1e5c5418def78bdb6137ace4f3a1d7430392a1c9f9ac155d9a0446fabfa9b7179f7fb184dd085a944cf6cb247533b7c2b676633f23a8a52c92cd369a46e03e8df43a9ad198f1400662dfb3d19f2e15407", &(0x7f0000000040)=""/22, 0x8, 0x10030, 0x0, &(0x7f0000000080)}) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, 0x0) 14:18:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000240)) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="2f99df2e7554b8eea9ca94b16bfd1c9028373942bfcb79c5288c14eb80f8cb4aadbba76b031a3186ae259b3c374e7bbeba064c5e72e4e0bc1c1d13e6891d6085f591f57a9c95dcbd84e28f0701571f6d482242c61fbecc3436884cd464c2ee71b11a43eec07ac668816afb66aa1c7cbb79541854d1f4ba21d6f5e0d00930786f92449ddbcb19ca8bcd086b3fd5289da34359e3d9eee5c9bfca7c5e358b13aa24b88a8b31a58e760d8d69ea51b1006625ab1aa60f869e86bdddd8acf93a90d5992f931ecca3734a4ea19637a5afe11ae906a863a8f0ddc3deb519928b5c33d929379a14fcfe3b75", 0xe7, 0x7) 14:18:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) 14:18:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f00000004c0)={{0x0, 0x0, @identifier="d10eda88991b22200ad4cae97a98f060"}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0)=0x3f, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000480)=0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$sock_int(r10, 0x1, 0x1e, &(0x7f0000000140)=0x466b, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r11, r4, 0x0) write$P9_RATTACH(r4, &(0x7f00000001c0)={0xffffffffffffff92}, 0x14) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0xd8, 0x7, @buffer={0x0, 0xc4, &(0x7f0000000200)=""/196}, &(0x7f0000000300)="188b043cc493001b06459351a8d47509f1b9127f8dea223b52c3ab29c414c423ffb3c99f22036d1fb8cd7e013ff0b0469f66df7e60db8377f65aa4de0691f0bd68d8a0a8d89d8b91d1b07fb420845f483e88750bc78b69bb27e29f4c177fe7c3ded23a0624a92e11a33a91dd2c8980b7ec9c0cef5d28b0604d618a8fd3ac707f2039ac50a77cebc1e5c5418def78bdb6137ace4f3a1d7430392a1c9f9ac155d9a0446fabfa9b7179f7fb184dd085a944cf6cb247533b7c2b676633f23a8a52c92cd369a46e03e8df43a9ad198f1400662dfb3d19f2e15407", &(0x7f0000000040)=""/22, 0x8, 0x10030, 0x0, &(0x7f0000000080)}) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, 0x0) 14:18:34 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 14:18:34 executing program 5: unshare(0x4000400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1dce) 14:18:34 executing program 2: getpid() r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='\xd1w\xb2!9\xc7Y\x8b\xd0\x1d\r\xea;\xdd\xdc\x0e\xc9b{]~Nq\xf6Z\x05\x8d\\\x9c\xa5\x9b\x14\xc8\\)[\xaf\x8d|\xcdI=\xdf\xbf\xe6\x1c\xb9\x92\x82\xe9\xbb\xdb\x10\x84\xb9\xfe\x8f\x82\xd1\t\x8c\xd47`(\xf0I\xd8\x82\xb7H\xa9\x13X0\xca\x19\xae\x9en\x8a\xf7\xba \t\xad\x8cA\xc9\xc2\xe1aY\xf3\xbd\vN|p\xbf\xf8\x06\x8f)\xda\xb4\xebL1\x01a\xe9\xcc\xd9Q\x89\xff\xa4Rfm\x03-Kr&\x8a\x9a\xbb\x05\xc3\xa6B\x9c\x19w\xd6\x98_6Eh\x97\x06\x83\x97\x1c[\a\xe6\x19=\xaaH\xf6\xde\xcf\xec.sm\xae\xeeZ\xf3*\xf9\xbe\x14Tg\xb1O\xb4\f&\x1c\x06e\x99\xed\xadr6\xe8c4\xc0\x93\xde\xe0S\xbb~\xe7\x86\x9eG]\xe7\new\xee') listen(r1, 0x0) 14:18:34 executing program 0: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = getpgid(r0) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r7 = syz_open_procfs(r2, &(0x7f0000000100)='loginuid\x00') fchdir(r7) fcntl$getownex(r7, 0x10, &(0x7f0000000080)) r8 = gettid() r9 = getpid() rt_tgsigqueueinfo(r9, r8, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r10 = syz_open_procfs(r9, &(0x7f0000000040)='net/bnep\x00') mq_timedreceive(r10, 0x0, 0x0, 0x0, 0x0) 14:18:35 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x33c, 0xffffc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], 0x1a1) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) r6 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x14004984) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r5, 0x200000000002) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000004c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x7e0fdecf, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x3, @empty, 0x100000000}, @in={0x2, 0x4e21, @local}], 0x68) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000003c0)={0x800, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x3, 0x1}) signalfd4(r4, &(0x7f0000000100)={0xffffffffffffffff}, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, r3, 0x0, 0x0) dup(0xffffffffffffffff) 14:18:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x56}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 14:18:35 executing program 2: r0 = getpgid(0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r2, r1}, &(0x7f0000000080)=""/58, 0x52, &(0x7f00000002c0)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000240), 0x4}) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="b36c50e56330a58fa2fcf930ab8b34070677f4c5fcb7a0cd571d7abee7147e6999e0aa179d5323616b42535d3ba89432bd44454f896ff42271779191239e4b7a14d4b56fd1f72f0617ff9e2cc63bb75ce73e7d8b84d1787e0fe23d93647398845ea05fde59f6ddac443aced7d36adc0111b7598d4f6f18008a3ce9cb65b38b7d31c89c751955603c2c2abff4b936541985fd032b539e64cacdd9d0c9563b7113394f662ca952079eaef45b4d9a917561cae3d3bdec3036ed28f3a4", 0xbb, 0xfffffffffffffff9) keyctl$read(0xb, r4, &(0x7f0000000280)=""/199, 0x6e) syz_open_procfs(r0, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x8) 14:18:35 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x33c, 0xffffc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], 0x1a1) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) r6 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x14004984) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r5, 0x200000000002) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000004c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x7e0fdecf, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x3, @empty, 0x100000000}, @in={0x2, 0x4e21, @local}], 0x68) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000003c0)={0x800, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x3, 0x1}) signalfd4(r4, &(0x7f0000000100)={0xffffffffffffffff}, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, r3, 0x0, 0x0) dup(0xffffffffffffffff) 14:18:35 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x8) 14:18:35 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 14:18:35 executing program 5: unshare(0x20000400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setsig(r0, 0xa, 0x41) 14:18:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) r1 = dup2(0xffffffffffffffff, r0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) getsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:18:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000040)=""/163, &(0x7f0000000100)=0xa3) fchdir(r1) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x1000, 0xa949, 0x3f, 0x7fff}, 0x8) 14:18:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x73, 0x0, {{0x0, 0x3}}}, 0x18) poll(&(0x7f0000000040)=[{}, {}], 0xfd, 0x0) 14:18:36 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 14:18:36 executing program 2: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x19, &(0x7f0000000080)={0x0, 0x100000, 0x40001}) r2 = syz_open_procfs(r1, &(0x7f0000000040)='sched\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000240)) r4 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r4) lseek(r4, 0x3, 0x3) fchdir(r3) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x40, 0x3, 0x2, &(0x7f0000ffb000/0x3000)=nil, 0x3}) listen(r2, 0x0) [ 382.393594][ T32] audit: type=1326 audit(1574086716.432:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14550 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 14:18:36 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x33c, 0xffffc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], 0x1a1) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) r6 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x14004984) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r5, 0x200000000002) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000004c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x7e0fdecf, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x3, @empty, 0x100000000}, @in={0x2, 0x4e21, @local}], 0x68) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000003c0)={0x800, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x3, 0x1}) signalfd4(r4, &(0x7f0000000100)={0xffffffffffffffff}, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, r3, 0x0, 0x0) dup(0xffffffffffffffff) 14:18:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x2) 14:18:36 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="05ea92b9000000000000007be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x33c, 0xffffc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], 0x1a1) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) r6 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x14004984) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r5, 0x200000000002) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000004c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x7e0fdecf, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x3, @empty, 0x100000000}, @in={0x2, 0x4e21, @local}], 0x68) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000003c0)={0x800, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x3, 0x1}) signalfd4(r4, &(0x7f0000000100)={0xffffffffffffffff}, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, r3, 0x0, 0x0) dup(0xffffffffffffffff) 14:18:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x4, 0x2, 0x1, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) fchdir(0xffffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) 14:18:36 executing program 1: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000100), 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "fba56571b8b9acb8d43e12f2ccd1333cecf83f1a5310f5688177a724585f0340"}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x74c, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 14:18:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) [ 382.945450][ T32] audit: type=1326 audit(1574086716.992:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14550 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 14:18:37 executing program 2: gettid() r0 = getpid() r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x89, 0xffffffff, 0x80000000, 0x4}) getpid() r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) rt_tgsigqueueinfo(r4, r3, 0x3f, &(0x7f0000000080)={0x0, 0x0, 0x40002}) r6 = syz_open_procfs(r0, &(0x7f0000000180)='\r\x03L(\x12\xab$x\xfc\xbc\x10z8\xbd}\x85!\xb3\x92\xa9\xc9\nT\xf7H\xaa\x84\x81\xe0\x96\xd8<\xfao\x03\xa2\xb5\'\x87\xcb\xf3\x12z\xd2\x19\x99\t\xf7\xae,\x9fW\xf7(U\x8e\x06\xd8Q\x16\xd4\xdfub\\\x10\xdfY\x9ae\xfa7$(\xce!\xf7\xcb\x03\xf2g\xdf\xae\x84\xce\xd2i 3CO\x86c\xecw>\xef\xf0\xe1}A\xef\x18\xfd\xea\xffn\xdd\x01\xa0\x14\x9d{\x06\xfb\xc7\xc07\x86\xe4\xc5\x06\x10Y\xee\x89\xa1_^\xdeV[\xb3e\xcc.+g\x9d\xdeu\x03&c\xb0\x11\xc9H\x1d\xbc\xd4\xfb|C\x17\x91.\x98\x13\x00\xf5\xa8\x8f\xff\x95\xec\xfb6\xcd\x9a\x7f\x8f\fJ\x98j{=\x9f\xa1\x84O\x89\xef\f\xd5\"\xcd>\x92d\bl\xab\xf6\xa19Q\x8be]\xc5\xdeK\x18\xe6\xec9\"\x9c+\x02\x0fz>b^\xaa\xbdt\xb6\xc6/\xbf7\xa4G\xd6L\x12\x8f\xa3\xbd\x97v}\x04\x114I\xba\xf1\x8b;t\xac08\x88\xdfZ\xc6~\xa8T\xd5\xd1\x9a(\nG\xda\xae\xe8\xc0\xef\xc0\xfb)\x1eX85M\xb5\x8e\xe5\x8ac\xa7\xb2\x99mxP\x1a=<\xdbm\x8a\x91\xb2\x84\x81\xd2)') listen(r6, 0x0) 14:18:37 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = memfd_create(&(0x7f00000001c0), 0x0) write(r1, &(0x7f0000000040)="c4", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffd02) 14:18:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x101, 0x0, 0x800000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 14:18:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x0, 0x0, 0x1, 0x0, 0x5, 0x2}, 0x4}, 0xa) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @multicast2}}) 14:18:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000100)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) prctl$PR_CAPBSET_DROP(0x18, 0x17) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r1, 0xe, 0x5, 0x9, 0x8021, 0xffffffff}, &(0x7f0000000180)=0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) dup3(r4, r5, 0x0) ioctl$TCFLSH(r5, 0x541b, 0x710000) fchdir(r3) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000300)='net/sco\x00') fchdir(r7) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffff, 0x12400) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r9, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000", @ANYRES32=r2, @ANYBLOB="0000000000000100000000000000000001000000", @ANYRES32=r0, @ANYBLOB="0000000000f0ffffffffffff0000000000000000", @ANYRES32, @ANYBLOB="76a35882ac000000aa000000f000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000c00000000000000040000000000000", @ANYRES32=r8, @ANYBLOB="0000000000800000ff7fffff0040000000000000"]) r10 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000000380)) r11 = gettid() r12 = getpid() rt_tgsigqueueinfo(r12, r11, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) syz_open_procfs(r12, &(0x7f0000000000)='net/fib_triestat\x00') r13 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r13) ioctl$sock_SIOCADDDLCI(r13, 0x8980, &(0x7f0000000340)={'bond0\x00', 0x4}) 14:18:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4920000, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 14:18:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53, 0x0}, 0xff9a) 14:18:37 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xffffffff, 0xa, 0x4b980d6a776a286a, "99f574c5cca5df14400e2557051d58d2b7ce9847aeb6e9e9fc8f6199db5788ca", 0x42323151}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) rt_sigqueueinfo(0xffffffffffffffff, 0x36, &(0x7f0000000080)={0x10, 0x6, 0xe92}) listen(r1, 0x0) 14:18:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "4908edd8f55ea0df", "a9de4c9e5a90730cf0b2a3df65980baa", "2f3b14fa", "92e9a33f17eac8b8"}, 0x28) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4001000010000d040000000000000000ffffffff00000000000000000000f0ffab1e000000000000000000000000000000000000000000000000004099b1de0036cf5bd07c533f3214da22b3fefedc0ba70a657e17031e227409336e1e115fe4630591718a105115eccdcf7555a57931bbf6e3dd6e14bf1baa4b419dd1ede8c9c32e9219343786b477856d904f823f7778178c4b734dda587bbed8a667cb43a8a6f51bbb705472b42993424367b781c6f396c09f635eb8ad5854799f53e3e11114b129a868d4488475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000020000000000000001000000006c000000ff010000000000000000000000000001000000000000fd000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f448ccd98f7b37e8e49ed0a000000000000000000000008001600000000004800030064656600"/248], 0x140}}, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 14:18:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4920000, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 14:18:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="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", 0xfc) 14:18:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x20) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x6}) [ 384.573455][T14633] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. 14:18:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000240)={{}, {0x80}, 0x0, 0x2, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x2, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 384.661458][T14633] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. 14:18:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) listen(r0, 0x0) 14:18:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x101, 0x0, 0x800000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 14:18:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="fc0000004900071f8a092504090007000aab80ffffff00000000e293210001c000000000000000000000ffff0000000000001ec28656aaa79bb94b46fe000000bc000200000300f92fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00000100d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab820f06f70cce190a60aa47e9883997f391064e763b6f380f5bd92c83170e5bba4a463a1e00566f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0454e64e00ccf19a494c8cf", 0xfc) 14:18:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000100)) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) 14:18:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4920000, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 14:18:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) syz_open_dev$vcsa(0x0, 0x1, 0x248240) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r1 = dup(0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000340)={0x5, 0x0, [], {0x0, @reserved}}) 14:18:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') listen(r0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 14:18:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="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", 0xfc) 14:18:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) 14:18:39 executing program 2: getpgrp(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') listen(r0, 0x0) 14:18:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4920000, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 14:18:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="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", 0xfc) 14:18:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1f, 0x9, 0x5, 0x9, 0x6, 0x6, 0x6, 0x27a, 0x38, 0x12e, 0x40, 0x8, 0x20, 0x1, 0xa74, 0xe132, 0x3f}, [{0x3, 0xde, 0xa27f, 0x80000001, 0x3, 0x7fffffff, 0x2, 0x80000000}, {0x5, 0x8, 0xa000, 0x0, 0x2, 0x4, 0x6, 0x1}], "089c8ce1c66d5ad0a768d24af26aef80964d4012ae937c0f680ad321a6fd81a308050b6bef701d59b2ce50bc2972b7170b2669a1f104ac81bcbb724c1230ca9e62f9232c136b8ebf4447e27a30f72f0658ed7d9582ccf105ddeb2f9b1720301352fa0b28ea76cc41d9e057b8f8fad2264f4f405056e1ebeab26561ae7149b50167ddf423b953150bdacdf141f0966d51e37c043bf15f48f37ab210bbaae879cea6702250ff94b2404e4d40cf6f9d54ddcc551b778d15", [[], [], [], [], [], []]}, 0x72e) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 14:18:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x101, 0x0, 0x800000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 14:18:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) listen(r0, 0x7ff) 14:18:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) syz_open_dev$vcsa(0x0, 0x1, 0x248240) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r1 = dup(0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000340)={0x5, 0x0, [], {0x0, @reserved}}) 14:18:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2a000, 0x0) io_uring_enter(r1, 0x200, 0x40, 0x1, &(0x7f0000000040)={0x6}, 0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f00000000c0)) 14:18:40 executing program 1: unshare(0x2000400) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 14:18:40 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r1, r0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1}) 14:18:40 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x22200) mq_timedreceive(r0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 14:18:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x4e23, @rand_addr=0x9}}) 14:18:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140)=0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 14:18:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000140)={r2, 0x53, "2ae2379e39c03b57ebe249cc3acb157982a561dc0dda6d3e445596db04d5cdb321620780721f5e0fdb45bbee6a6649d7df6746734d372bb111a41849d1db55c9227b77b112393c308bd769b458db541c40b69a"}, &(0x7f00000001c0)=0x5b) 14:18:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) syz_open_dev$vcsa(0x0, 0x1, 0x248240) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r1 = dup(0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000340)={0x5, 0x0, [], {0x0, @reserved}}) 14:18:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x101, 0x0, 0x800000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 14:18:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='wiQ\x14\x18a\xf6aZ\xab\xff\x0e_5Y\xf9zb`p\x0e\x04Q>A4\x8f\x8c\xa4\x90&\xb2[\x87\x1a\x19\xa2\xb3~\x96\xd2\xa0\x1c\x00$\xe4\xdd\x99\xe7\"\xceo3`b\xf2qb2`-!\xd42\xc4q\x1c\xa4\f\xe3\'\t\xb0Lp\xbc\x04\x8a\x8d<\x8fR\xfd\xfc\xee\x12H\xbe\xbb\x88\x18m\xb9\x84X*\x8cm\xd6\xafT\xf6\xa9\x9c\x90\xfdi4\x9d $') setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x1, @ipv4={[], [], @multicast1}, 0x26}, {0xa, 0x4e23, 0x9, @rand_addr="eccfb4c7feb300", 0x80}, 0x6, [0x8, 0xfc6, 0x7, 0x8, 0xfff, 0x8000, 0x9, 0x88]}, 0x5c) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x800, 0x2) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x3, 0x10000, 0x7fffffff}) fchdir(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) sendfile(r1, r3, &(0x7f0000000280)=0x4, 0x7fffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x31c, 0x7b, 0x0, 0x6, 0x303}, &(0x7f00000001c0)=0x70) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={r4, 0xff, 0x621e, 0x3, 0x100}, 0x14) dup3(0xffffffffffffffff, r0, 0x80000) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r5) fdatasync(r5) 14:18:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x4000000000001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x20000000000080, 0x0, 0x0, 0x1}) 14:18:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) syz_open_dev$vcsa(0x0, 0x1, 0x248240) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r1 = dup(0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000340)={0x5, 0x0, [], {0x0, @reserved}}) 14:18:41 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r1, r0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1}) 14:18:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 14:18:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 387.728323][T14763] device bridge2 entered promiscuous mode 14:18:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) getpgrp(r1) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000100)='maps\x00') mq_timedreceive(r4, 0x0, 0x0, 0x0, 0x0) [ 387.868447][T14768] device bridge_slave_0 left promiscuous mode [ 387.875587][T14768] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.076160][T14768] bridge2: port 1(bridge_slave_0) entered blocking state [ 388.083540][T14768] bridge2: port 1(bridge_slave_0) entered disabled state [ 388.092633][T14768] device bridge_slave_0 entered promiscuous mode [ 388.101355][T14768] bridge2: port 1(bridge_slave_0) entered blocking state [ 388.108764][T14768] bridge2: port 1(bridge_slave_0) entered forwarding state 14:18:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') listen(r0, 0x0) 14:18:42 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='gid_map\x00') pipe(&(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="10000040030000000000000000000000b22025285db74192e7576d9062ec6e2fa5733f8ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xfffffeca}]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200), 0x0) 14:18:42 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r1, r0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1}) 14:18:42 executing program 0: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(r1, &(0x7f0000000000)) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) 14:18:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/101, 0x65, 0x40000000, &(0x7f0000000080)=@in={0x2, 0x3, @multicast2}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x1b0, 0x4) 14:18:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 14:18:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x2e, 0x1, 0x0, 0x0, {}, [@typed={0x4}, @generic="b6474ab276d0f7eac31236"]}, 0x24}}, 0x0) 14:18:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x400000, 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000180)={0x5, 0x10001, 0x1000, 0x2, 0x8, 0xfff}) fchdir(r2) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f00000001c0)) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000040)=""/222) prctl$PR_GET_SECUREBITS(0x1b) 14:18:42 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r1, r0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1}) 14:18:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x3, 0x20000000084) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) [ 388.947237][T14799] device bridge3 entered promiscuous mode [ 389.033414][T14814] device bridge_slave_0 left promiscuous mode [ 389.040195][T14814] bridge2: port 1(bridge_slave_0) entered disabled state 14:18:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x2e, 0x1, 0x0, 0x0, {}, [@typed={0x4}, @generic="b6474ab276d0f7eac31236"]}, 0x24}}, 0x0) 14:18:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xfe37}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b5a7537}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004003) listen(r0, 0x0) 14:18:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) syz_open_procfs(0x0, &(0x7f0000000240)) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) mq_timedreceive(0xffffffffffffffff, 0x0, 0xd5, 0x80000000, 0x0) [ 389.181312][T14814] bridge3: port 1(bridge_slave_0) entered blocking state [ 389.188806][T14814] bridge3: port 1(bridge_slave_0) entered disabled state [ 389.198280][T14814] device bridge_slave_0 entered promiscuous mode [ 389.206724][T14814] bridge3: port 1(bridge_slave_0) entered blocking state [ 389.214115][T14814] bridge3: port 1(bridge_slave_0) entered forwarding state 14:18:43 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b10") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x5, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x21) 14:18:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd, 0x3}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) [ 389.372552][T14824] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 14:18:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x2e, 0x1, 0x0, 0x0, {}, [@typed={0x4}, @generic="b6474ab276d0f7eac31236"]}, 0x24}}, 0x0) [ 389.443694][T14831] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 14:18:43 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101400, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xfffffffffffffea7, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0xffffffffffffff77}, 0x1, 0x0, 0x0, 0x10}, 0x48005) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) 14:18:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 14:18:43 executing program 2: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x2, 0x400000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000340)) r3 = syz_open_procfs(r1, &(0x7f0000000100)='\x95pb,\xf3\xab\xc7w5\xd6\xa8\x8d\xc3Z\xef\x1b\x99|\x17\x94\xaf\xaa\x84D\xea\xb8\xa3\xdaa>s\x05\xc3\x9e1\xa8\xa1\xdd\x8d\xbbi>Apq\x1e\xfb\x1f1W\xe5\xf5\xae#?\xb0\xaa\x88\x97Utzf\x17Rm\xce\x18\x96h\xf7h\xa9S\x1d\x90>\xe4b\xb6\xc9Rr\xb6\xab\xb8\xb8\x89\xfd[\xd5\xb0V\x02\x00\x00\x00\x00\x8an$\xb4h;\x98[x\x87$$p\xf7\x10\x00\x0e:\x96\x9d\xcf\xf4\xb0\xefV\x91\x05\x90K\xaf\x86\\\x1b\xc9\xfd)\xc8\xc3\xd2\f\xbd\xb1G\xef+Z\xae\x96\x01[\xd3\x16\x83@\xee\xaf\x0f\x0ee]T\xb3\xff\x9e7!\xb1@\x82z]\x96\xdf\f\xf5Bu\xdf2\xb6f\x15\x994\xcd\xa4)\x0f\xdf\xbe\xc5\t\xd0)6\xdf\a\xc7<\xdazJm\x81#\x1e\x96G\x9fc\xafV\x03\xae\xcad0') getrandom(&(0x7f0000000200)=""/223, 0xdf, 0x1) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x200, 0x8000) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000003c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "3e7ba302f66a7209", "631c1a460f67fe4d3d357c3fa848301660d65bf84bd24d1d21991a4571304bb7", "53c5407b", "22a54a1c824a8900"}, 0x38) [ 389.660265][T14834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:18:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) [ 389.741131][T14834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.769331][T14834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.940259][T14854] device bridge4 entered promiscuous mode [ 389.994946][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.008744][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.017004][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:18:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 14:18:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) r2 = accept4$unix(r1, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'veth0_to_hsr\x00', {0x2, 0x4e20, @remote}}) 14:18:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x2e, 0x1, 0x0, 0x0, {}, [@typed={0x4}, @generic="b6474ab276d0f7eac31236"]}, 0x24}}, 0x0) [ 390.042114][T14859] device bridge_slave_0 left promiscuous mode [ 390.049533][T14859] bridge3: port 1(bridge_slave_0) entered disabled state 14:18:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x7b, 0x0, [0x48000000000048c], [0xc1]}) 14:18:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x214002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/null\x00', 0x10002, 0x0) bind$netlink(r4, &(0x7f00000013c0)={0x10, 0x0, 0x25dfdbfd, 0x35bf6595fe8e177}, 0xc) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x38, @empty, 0x4}, {0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100}, 0x401, [0xd9b5, 0x1000, 0x8, 0x10000, 0x1, 0x405, 0x7ca03f8, 0xfffffffe]}, 0x5c) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0x14, r5, 0x5, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYRES16=r5, @ANYBLOB="e0cd200f000000080005000100ffff000000000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x2000}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200200e0}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r5, @ANYBLOB="200025bd7000fedbdf25020000002800030014000600fe8000000000000000000000000000aa0800040000000000080008000600000008000400bd0f000008000400220d0000abb3ea1408000b007369700008000b007369700008000800030000000c0006006e6f6e650000000008000b007369700008000600ffffffbab3bd082920a9a1002800020008000d000c00000014000100ff010000000000000000000000000001080004000800000008000400ff7f0000"], 0xbc}, 0x1, 0x0, 0x0, 0x7aa21aff6da663d6}, 0x22000080) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r7) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f0000000480)) r8 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="51d8af463f3cd21354fe9b45ceb7b8ec"}, 0xfe, [], "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"}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 390.178292][T14859] bridge4: port 1(bridge_slave_0) entered blocking state [ 390.188019][T14859] bridge4: port 1(bridge_slave_0) entered disabled state [ 390.197192][T14859] device bridge_slave_0 entered promiscuous mode [ 390.205585][T14859] bridge4: port 1(bridge_slave_0) entered blocking state [ 390.212826][T14859] bridge4: port 1(bridge_slave_0) entered forwarding state 14:18:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd, 0x3}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) 14:18:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') sendfile(r0, r0, 0x0, 0x4) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1, 0xe) [ 390.415118][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.429121][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.433586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 390.437151][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.442802][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:18:44 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0xffffff8b}, 0x14) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) read$FUSE(r2, &(0x7f0000007380), 0x1000) 14:18:44 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f00000008c0)=""/4096, 0xdc1}], 0x5}}, {{0x0, 0xfffffffffffffeb7, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) 14:18:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 14:18:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) gettid() r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r6 = syz_open_procfs(r4, &(0x7f0000000080)='\x9e\xa3\x14\x1fP\x1d\x86\x80\xa2\xbc\x04\n') fchdir(r6) listen(r6, 0x9) r7 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r7) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) 14:18:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 14:18:44 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f00000008c0)=""/4096, 0xdc1}], 0x5}}, {{0x0, 0xfffffffffffffeb7, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) [ 390.814851][T14908] device bridge5 entered promiscuous mode 14:18:44 executing program 3: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 14:18:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000000)="ac235ee0a892114648c440aa00fc94e85aa93ed5aaa953293a8cf9d739acb4b1d048bc1075e1d9ce14575c3bb8cc81228a7e37c869f7de68a4915b5b7bc2bbc73241d302744da8705d8c7392", 0x4c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) [ 390.917555][T14908] device bridge_slave_0 left promiscuous mode [ 390.924539][T14908] bridge4: port 1(bridge_slave_0) entered disabled state 14:18:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd, 0x3}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) [ 390.981167][T14908] bridge5: port 1(bridge_slave_0) entered blocking state [ 390.988635][T14908] bridge5: port 1(bridge_slave_0) entered disabled state [ 390.997979][T14908] device bridge_slave_0 entered promiscuous mode [ 391.007101][T14908] bridge5: port 1(bridge_slave_0) entered blocking state [ 391.014524][T14908] bridge5: port 1(bridge_slave_0) entered forwarding state [ 391.170647][T14925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.186021][T14925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.197648][T14925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:18:45 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f00000008c0)=""/4096, 0xdc1}], 0x5}}, {{0x0, 0xfffffffffffffeb7, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) 14:18:45 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x1) flock(r2, 0x6) [ 391.226991][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 391.234195][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:18:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") 14:18:45 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0xffffff8b}, 0x14) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) read$FUSE(r2, &(0x7f0000007380), 0x1000) 14:18:45 executing program 2: getpid() r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) getpgrp(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='\t\x9c\x93\xde\xecn4\x04\x83\x18k\xbd9\xb5\xbf\x9f\xca\xcfV\xed\xd3\xb9a{\"\x9d\xf1\x9b\xc2\xde:\x87\fG\xde\xa8\xb5\"') r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r4) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)) r6 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f00000000c0)) fchdir(r5) listen(r5, 0x5) 14:18:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfed7, &(0x7f0000000140)={&(0x7f0000001640)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf14eb7e4af77fe67}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}]}}}]}, 0x3c}}, 0x0) 14:18:45 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f00000008c0)=""/4096, 0xdc1}], 0x5}}, {{0x0, 0xfffffffffffffeb7, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) [ 391.543382][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 391.549759][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 391.556420][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 391.562776][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 391.569521][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 391.576029][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:18:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd, 0x3}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) [ 391.713054][T14951] 8021q: adding VLAN 0 to HW filter on device bond1 14:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000300000031095100edd7279090733dc4ad19454c080a51e57b41a8ae79f4ee73acfb8629c2ca9c4e221486fc5b6e93d3606181db2d7c9059a45dc2cf78a531ebff78389e50a71e3dc5e31f608591576c7a9ba135b4834f460e893c422cebb16b06b0264dfe5b"], 0x5d) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r1, 0x0) 14:18:45 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0xffffff8b}, 0x14) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) read$FUSE(r2, &(0x7f0000007380), 0x1000) 14:18:46 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000040)='trusted.\xd7verlay.redirect\x00', 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000040)='security.ima\x02', 0x0, 0x0, 0x0) [ 392.012183][T14966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 392.026326][T14966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 392.038689][T14966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:18:46 executing program 3: clone(0x4001400, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x0) userfaultfd(0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:18:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) gettid() getpid() r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000300)={{0x8, 0x2, 0x8, 0x8, 'syz0\x00', 0xf409}, 0x3, 0x8, 0x0, r5, 0x7, 0x9, 'syz1\x00', &(0x7f0000000280)=['-nodev\x00', '\x00', '\x00', 'net/fib_triestat\x00', 'net/fib_triestat\x00', 'net/fib_triestat\x00', 'net/fib_triestat\x00'], 0x4d, [], [0xfff8, 0xfff9, 0x9, 0x7f]}) r6 = getpid() rt_tgsigqueueinfo(r6, r2, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r7 = syz_open_procfs(r6, &(0x7f0000000240)='net/fib_triestat\x00') rt_sigtimedwait(&(0x7f00000001c0)={0x400}, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x60c0}, {0x101}, {0xfffb, 0x286}, {0x81, 0x400}]}) r8 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r8) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, &(0x7f0000000080)={0x3, 0x0, 0x4f3270880e6f3f8f, 0x4, {0x28f, 0x7ff, 0x59d8, 0x4}}) fchdir(r7) r9 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r9) ioctl$PPPIOCSFLAGS(r9, 0x40047459, &(0x7f0000000100)=0xacdb407c43e059a4) fallocate(r0, 0x20, 0x1, 0x91) listen(r0, 0xfffffff9) 14:18:46 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x0, 0x0, 0x2000d031, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0x10090, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 14:18:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="02070003020000000000000000000000437adfb1eff6a84a8edbaacae3a40a9d8230057d4ae59af95d78a0b0d3acc96aa828e8297d3775dcfb137e8e7d0829dd5bd8bc2d140def68725c1f8898c090b67ddc2ed945f0f5afdd1ec7cfa2d469c6b94a284ced76c0c80b21805911ce9557564c3e4d6b7100cfd1f9960029027b02c1042a6bb1edb0c901f78d475f880b1bdd0a54eaa3111bf748489bed991f9e8eba7883c86d3216897e088715e4159ea897a6cdf9c45d9c93aa5fdbfc43bfc7cddfe9fb74dbe1108634b9ad72a47447d0ca4f735f8ddc7781c37e1a86ded7c332b355e8111dafa773f00381c29432e48da14f1bc304786e78d6fc153e575f51f70ee15ff90e13e521d01efb4e3e0c4c1040a1810399882ca5f52fb1dd833678e5236c135ce400353b5fecd47bb211b20aaa64050fc711a46085f662b1ce29a46f1f3476d32a36fcf675010cf969f83dd980d3745de80eb59510b7701b706ec868aae1b9652e72492b504e19659f1a3ba6b97b516e594914253278c1f6c7fd18be684a854f42a7558c8d8f3459fe374dcf8496e2f73df9318dd5cde0dc237c816909408c9288e4e5ab686fab41bd1c1c69f0134900a6e5b627d7358de02ecb67c8b4c3e85039ab68b8acc15bafa9d7e0db69bfeb1411ab8bedc185d5328cc7cbe653b859306e1e5711"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") 14:18:46 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0xffffff8b}, 0x14) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) read$FUSE(r2, &(0x7f0000007380), 0x1000) 14:18:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000000)={{0x2, @name="c94e519e495794ae1da863124481633f54e49a8f251c633193a66ab3b7dcede3"}, "496f61157991bcdb3be5c39f47416bde9981e19969659ae1ab81fa0f95779855", 0x2}) listen(r0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0x8, 0x102, "b2ecc97119db5ffde828afdc7fdea5c7a78452a1543608a05a7a02c56dd4f0c7", 0x5, 0x8, 0x8000, 0x6, 0x20}) 14:18:47 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0xffffff8b}, 0x14) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) read$FUSE(r2, &(0x7f0000007380), 0x1000) 14:18:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") 14:18:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @remote, 0x10000}, 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/tcp\x00') listen(r2, 0x0) 14:18:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x501000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001080)={0x30, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0863104003008c0000000000000000006c8dd9c6c95feab4a1f37105fc9607400300"/49], 0x1000, 0x0, &(0x7f0000000080)="16d3aa52769b180ff1e117d6fe3886dcda37af147430a1713d26c5faf6071e431dc45860b9ccfda27c447d8310f7cae7102443dba695addfadac2ff96d4fe05abb9c6ebef073d205781990dc543c2553c7dd801ccfdf9f23ef41741de176c0fec7e02ae12ec149d2527f4834a943a11303c318bde52271082232ca7bf5c13f0ffd2093f754625f4d2cec83fca9eace7914f699b315fdaea1a5297ceca50b3d83c28c5da472f7f0d56f2c648262417c2bd2f370b27c88e2812350ad90783b27ddb432233388ba2644d64be7070a1c0a1c45cd54c4fd2d7c571d9bbeb217f1dbedc18902f0e513a33ba679742d0fd79832f9ccaef83c5a46b925cdb8eba4727e44d1fa5f6da529fc57ed637432dcc32367fbf5bc5a3fb5bde7905c1a057334949d59818cf82038723683fa9980b915179c180b0dddb83d66ea8b98a25d6a9194b304bc4acf85113c08c12dc9826468f865794a1a56c6927afd1b096728f360f667db8360830cd2975cc0381fc247468c262628ea798dc6327055f68e77997f50f75b2156a4974806d19ce43dbf8c18ff70e39b23b0c0b4a3aaf2dafdb6599fda096431331e39bba488ad8662dfff6b6ce079ab19af9d813404e57ec6bdf2a1034e44ffb00a6758ab34561aae9e22463ba8c0d9fa73c012de105b57751e2f2e607d1089dcf80a988e958e3d8c171dd0dad7d5f871ac15260106b241cd8d68a1e0e7383154adb99698b9246450cc1f9397dbcabdeaf81df36a92b5da217ac973b5ed0aed429ca567347421dfbf9b468d52eaf249d74aac4a81f93aa3a610a5e546c4840f2f8f75aa966e68ff9497ec75262b2e61994e40cc3a523c92607606501b0f39249d91f2dfa26cde32e06661793cd09f8a97d4b3ae44d482863216c9658aa9ea7e88a3468a68aeb4d2799e6e6367611b9ffcfd394428b47dccdeaa0e6c73ba0d5259132393b91bc482b652f27ff3a2e6e54d03fdd8df93c922a44456bf6933c1a38d4871e65486842db3700193b506115dbd962cd861cd662095a460615638c854d04fd51f600bfcdf531f08fda87474aa3cf2f6b93933bf0b2932235a539c64339ce4a405fc703217c42fcfe4ccb2daa9e4d1359b17bb09d1f5c80847714b0deef172b3433840de9ce12c97d490fbbb5fb23fca21bf5210e092d68c227b1473f53abd5e4f852873afd0b6e73e173f9132086beabb64bb3b20ea38096ab9f8268ecf3f773c2327b5b0c53d3a29b81705f67fdc47b0c633c8f937539af51795522b83b70c25e4c7cf1c06eb2ce002a2b5f85b41e0ac75f4465730e33002176b1d656f810f764de9e1474f431307d2ed0528a820a69e90d4252baba9b2e9e6cf2547685ad594359fcbe9e4eb8be2e68f5bab1d1a0ea356a97d12a54def518a1027680154de33aafeb2a3e022bc60d239d3ec04910379c952e5fa95adbee3070ca6a7c876ae9b42e7b921ea299d8f3bcd477ee23a65d80ae1eff9d4b6d1d23211b28bb34b2ae1d06dd6b870170f43f032250861b1849254949754bb105af752a1849858bcd859b74e8f9df8afa766fa510de5a14fe45f55386a403c3958c8255071e5e0c101827588208ced0acca14684b51187ed33e1cfd902d72b8eb0ef17c204479224437c24e81387947ee1eddf09df2a752f018e1e1f6a762cacd172a586b2e488d0eb771bddf3daef1c59572e46cdb7b3b04e49c88a7c42be55942e160b12a2b99bff490a6f0706910c22eeb98559bd1b1b091969b826fe00ae50158cd10de44f63a577510b7cf6b113b056b3a6b024653b9906e728ca914eee8f301bdf8c2dff2824bc958dd59b4c882cb285eef2f4abc54e8d2f0b095e6540e807c3fc71d4c65320b95f8e0fa369d54986d8446e7021e0248bae378d6b5cd179667bb886f65737d0e49d5073eb73c30e026cc64bc18a4f76118c7659b9cf1b0afb025f84aac94654e0d0884f2e700b1d247b00f955b6165c183e7f5a1555f5523ded5473a7833a306c21ad76e303c36241ead222b6875d4603ce35c8a55e21a05c0253ff19e7d47f87b792ce3b2c14ebe8b137b8ba50728c4f3257fede12f887124f55d49cf62bed71717e3b427ff87f4c451b01917f014bc57dd3683f592c0239830bb0dd752840ede139d42dea2c8f52b841c9692530101a6b9862acdae116c8c1d00c20a575b1e6f0c97019d561f5611d2008344da6c6b591bab98145fe711281ab355a4e805a842cfbf5ee49f023cf971fa78eefd5f77763dca0b4f05927d49700ad70c50013cf8961da6e8d19314ca04fa48b875ab09a37834b089832a6150f126e133738ebb8f9469843e26daa45c84ade67e42f1e5fc1c08224e441dd50352d8caca1e0f72d851437ca2d64384270125cd45807cd8500b90131f35dbab5e26e6a7a735fb6fd515ed3c05406879bae0f38a168cc34d4bf21d20b7484dd1138231c997c51f501d752e3ece8df9acd9704665b892a0cbc4b735566d030e7970f4a6394b5c27d70ad905bfcbd3b19e2436236260d76b75f0d4baf01dabb9f35d86a26523910a72cf85f7351c93338450e8e88c0d0f3be7a716d0b2f6e698f0c6d2fc3c1cf4df0d12498c04b8d67ec2b98db685175589ac43c53f9f59c9906afa0a503f7f2944c4983e0d251c8a1afda7b482512ac5e07faf854f2295c1c4a4c2b2c7ca4b3ac1746280d1f9891c4e42c03010619d986c51ac402a4fe84cb746d41391ea4ba05e97deed063ebfa2ec8b694a49eae8cc56ca6641380949ca7cab4faf608b40c29ec6ad673a475f50160267b2d2ff4caea704374aa17a2dc5e018afa32b902e7bdac045d0f4f421792a958123278d2afd96a3480316838e23a1c87210aabea96ba962e69c15658293371d2693101eaf2fcc54ca57635b91d5e971b35427c1efa8cfe6ef1dc87dc16c5a3506c912576c4c560d983f73d864a5146879be22b7eebbd6530f8acaf8b27eeb5d5286fc142c31a136da48cd71a7790a1703749b8dd79b6457bfd1180e3222becbef16a0e292703afb8e1e68dad33de6971ab8868ca885d45f8c4686dc88a527e676d3460ca4b7a61a800e18e649602d766d8395c559a340af215baf0eeefa89a0c8de9c80d7ab17c4c598f85544422035fb7411563aea095f6083f810eadcdf36a039f818f0ebdc324ee217c3da79c177038ea40662db5a26a8a0ceefa1086a4cad5d8999e31051d6ec4df333484f5e2df869edf19b2a706ef48b8fc969d1b7d8d9a7edf04f2633f96e76bf34ab6e4e95340d4ac7549a8f917aa78378ac0a5f9452b6de3e5ea2f61bd90c4e8fc61f3d7dc73882aa1c8bac7382c67e32665e51fdd8c023eb5a9f879b1a34d1380bc0f85c51f8b037705408ac1feff8995559172e4d36d6fc554311653c7ac125a9fc160c52818bc473ace2fa818553856e06b247700334838be46d7b665d098dc311a5feb9730f530183b4c8641c12c1ccb832d6f41408ad1ad34f846450faf8d87f5583bb190e0bba2c7faff2d2ce14df5f4fd7ea7dc54c1c2b69b8d4afb68de2af81a1f968043353c2603eb310db90d028cc81a713f031aecf2cf676c2e0a73c685f4e504f37d54a31b820b3f28cb2d624cac7684244c6cdf1f4e6a03c94c983d67cf7783a232ec2ddfce160a8ce0e84b170a648170c9765fbaec6dc1c21b13e8c230f378e56fcaa39633becde007ff8e0a4be90fec5bda7a32ee476a959fc561826d41e838ecd46f3f26e373faa63db42ee1eff62076f573cb8d303833b9a7f3edada7274f8b6a5252a007304f8929204312cd564d8e800d9aa8b39f56db82a826f3bf592cb234f52477cf62145cbfcbe7f0875a5873b94b2ba8f01318dca4ac6cf364b8fa1e0488f3b0f557c5f3d1b874b349a5bfb907be5280dce5bad9142c5e66a8070fa7dc1f07ae5ff6b8c3f330a9608753f74b8eb09dce04cdbf71500fd9f2a154ce959d4ef7e4e5215d1cfa1c609181cfcc01f7062068dc9ac47c105066ac64b89988fb0c741556a984d7fa6630d2d317053241a9f103bd3886ca88846287434fc2d7f62c0124767ab0bc2b9a8c8c05cc1283a1d0c004f89e00158bf470ead187ee060e81812237ff672c3ce0de0f07bfc83cde38afd60e4e66445d219d8222c3a395bf9e6de237a86fbd794dec33d8150a357599b31030cc184bea1cf71f865581ef573bd5d2d51a827c4068c70480c197e15b2c6fd51b1d769418cf50ac0f135ed078fad6eca7f09cad31361f51c7d228bf72369e4777a26a2092921939dc616107f3d6eefa98311d11ba8050d666dc4f486623f7be132f8e94f40e8f95f7b8492863c9fc230fc6fadb3cd43d4933e1dfa043d2463d29f4d0eba4ef749b4212b088a3be011f95097b1172044de554410c5b4ab1a8025f51126202f2804f69535a3b6e67addd35caf193cc144d7df98353dcc4e8fc6991a5852482b08f7291f9496726bd53cc4320692e77d8a1e76ef6d45ae62dcfec25004c0069a4b05693a9f2b46abd07c6e09b2f4f90742b0103938c1af57a8adba4f9c483a63c7de0acbd85d5d80ccd72de11d317d9f468e12e72b15b6a89291d3d6ab948dec3d509edb8ad6c519b53524815c4b34846b03fa33089544343870624daa944a01fe3c678165d9212c5d6a677c62c9340d5a4e6902af0e2158e7ea199ee0da0b9e073102f928f843d8b9ac721278b4e5fdbfe17f0502b02738e72ed3628a29f88a9c7a2012d00e42837823c95efe7a2a419a3bd4102cbb746f63fde054fe28f3dd06af6ec64e8e97b526007f917140593ab5208a3619ee8eb0c36b1aaf43b42a3a607eed1c719f12bbbcce18aefc17f40e34111425efa406d46252f66089d7a7ede85059f087ecf675b422696a9d746669a77836d98dc345e5cc0c4fe6766b7d3f2fb6f51c66a8346f69f015554b6ef1d33c983acbe4127a59911c511de265e0c4ade3a691d79bfddebab611da496f629bcd2dcc9b5f58ba5017162a1af5a21d4e5c9d30346c649f3b025beaf949823918d53bcdc834cd32cc5d607728f1116b038f52b3c1119481dea6153bb1c6b4e0981e5f3d2c774ebb1ac60b5e497bca41db0880e2a4e20a4fc4a7b19ddd3d6d4d5a7fb8e7429ed731ac77ffadf000f7935bd52801fa209bf8e34f0d71023609c108ea7d1d23bac4f0c7210733687ac091323404ac0ec8901b2e72f4677a5d07816e1ef3ad0b1675cc372f9f6d65bda666fb47f8423f2e69eff6f66ba38e2190f7ecbc3d946ab64c8810f5da277a80cd939e7eae0d7c7d34b9c0c39f58ff0fb32cc2170f5f2a4a22f6b426030a6db79389fada65a7cf52568e4f86555e67b0d9e37ad314d303d785fecadd7d16169a4009ad9136686bb6a6048acc752fed0feea9500e7cd679060bbc37d8bc9b873173e600f6dff7a615924e0f938b41845a7eb0b1919249ded6d83d247079ebe75644911de8ad2ac8034c58604ffa9cba84a04ebcef02b3eb3a364e783519ff4871777f3b86e74a5d2bcff39f06df6c00b94504fdaa4e2aa10851e4d0cd689c61dc41a7d839fd76462bfeadaa639329bc2d50ce5113a309beceefd9025d4666e1a445922de83f068d095909445af8fe5bdfe7e7f1272c086efaa2d943e4d6c091b7257e0e9c1af3d2f95df1be11656ba8cada0858bef8d4176b0bf57d2bee4eaca329fd8d31042bc0b95ceea3824ea20675ab91ce1bee8b8773693af0928cc5d83f58c7cbcb3d155af0ddfba2fd36d7a39af0b9b115d80ff63f0c9bc0971c5b96488d2dd916f3893d113a7b2627fe11e6e63357229931abdbb88ffbef1bf49933fa4b436ea53824116ac"}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) r3 = inotify_init() dup2(r2, r3) 14:18:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000180)=0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f00000000c0)=0x7, 0x4) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) io_submit(r1, 0x1f1, &(0x7f0000000540)) 14:18:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="02070003020000000000000000000000437adfb1eff6a84a8edbaacae3a40a9d8230057d4ae59af95d78a0b0d3acc96aa828e8297d3775dcfb137e8e7d0829dd5bd8bc2d140def68725c1f8898c090b67ddc2ed945f0f5afdd1ec7cfa2d469c6b94a284ced76c0c80b21805911ce9557564c3e4d6b7100cfd1f9960029027b02c1042a6bb1edb0c901f78d475f880b1bdd0a54eaa3111bf748489bed991f9e8eba7883c86d3216897e088715e4159ea897a6cdf9c45d9c93aa5fdbfc43bfc7cddfe9fb74dbe1108634b9ad72a47447d0ca4f735f8ddc7781c37e1a86ded7c332b355e8111dafa773f00381c29432e48da14f1bc304786e78d6fc153e575f51f70ee15ff90e13e521d01efb4e3e0c4c1040a1810399882ca5f52fb1dd833678e5236c135ce400353b5fecd47bb211b20aaa64050fc711a46085f662b1ce29a46f1f3476d32a36fcf675010cf969f83dd980d3745de80eb59510b7701b706ec868aae1b9652e72492b504e19659f1a3ba6b97b516e594914253278c1f6c7fd18be684a854f42a7558c8d8f3459fe374dcf8496e2f73df9318dd5cde0dc237c816909408c9288e4e5ab686fab41bd1c1c69f0134900a6e5b627d7358de02ecb67c8b4c3e85039ab68b8acc15bafa9d7e0db69bfeb1411ab8bedc185d5328cc7cbe653b859306e1e5711"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") 14:18:48 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0xffffff8b}, 0x14) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) read$FUSE(r2, &(0x7f0000007380), 0x1000) 14:18:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) fchdir(r0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) getpid() r1 = gettid() syz_open_procfs(r1, &(0x7f0000000040)='attr/current\x00') r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) listen(r2, 0x0) 14:18:48 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0xffffff8b}, 0x14) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) read$FUSE(r2, &(0x7f0000007380), 0x1000) 14:18:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000180)=0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f00000000c0)=0x7, 0x4) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) io_submit(r1, 0x1f1, &(0x7f0000000540)) 14:18:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") 14:18:48 executing program 2: listen(0xffffffffffffffff, 0x4) 14:18:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000180)=0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f00000000c0)=0x7, 0x4) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) io_submit(r1, 0x1f1, &(0x7f0000000540)) 14:18:48 executing program 2: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(r0, &(0x7f0000000040)='F\xbd\xed\x8fr\x8e\xab/\xf0A\xa2DV\x11e^-6XRs\xf6\xd37\xea\xa4U\xd3\x81t\xfc\x1f\xeb\xd4\xb6\xd3\x13|\xba\aJ\xd7\xe0\xb2tj\x1at\xd6Qb5yQ\x81\"\xa9\x15e\x85\xfc\"a\x94s\x05T\xa2\xbd\xfb\x01\xddN\xda\xdc\xf5\x9d\xa2\xc1\x92\x03\vh0i\xbb\x82:\x94\xa9q`\a\xdb\xd4F\x19!i%\x1c\xab\xca9Q\xd8\xefnJ\xe6\x10\x1b:X\xc5\f^\xcf*\"FM\xbc\xc7-\xc0\xb3\x04\xc2\x15\x86\x84J\xca\xeb\xac\xc4yw\x978=\x8c\x16\b\xcbd}\x85\x11~V)z\x8f\x18\xbf\v\xba|\x1a`\x96\xdc\x1e\x00Uh\xdd\xd0x\b}\xabuG\nm\xcd\xce\f') listen(r2, 0x0) 14:18:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x14, 0x1e, 0xf, 0x1c, 0xa, 0x17f, 0x0, 0x11e, 0x1}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x40}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xa}, 0x1ff}}, 0x2, 0x400, 0x7ff, 0x5, 0x9}, 0x98) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x0) 14:18:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000180)=0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f00000000c0)=0x7, 0x4) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) io_submit(r1, 0x1f1, &(0x7f0000000540)) 14:18:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) 14:18:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") 14:18:49 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000002c0)='\x00\x00@\x01\x00\x00\x00#,\x04>\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x81;\xcb{\xb0\xd6\x1e\x00\x00\x00Q\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xe6\x9c\xef!\xe2\xa2p\xf0\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oc\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00@\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') [ 395.703537][ C1] net_ratelimit: 18 callbacks suppressed [ 395.703559][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.715896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 395.722436][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.728986][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 395.735557][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.741952][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:18:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/11, 0xb}) listen(r0, 0x0) 14:18:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="02070003020000000000000000000000437adfb1eff6a84a8edbaacae3a40a9d8230057d4ae59af95d78a0b0d3acc96aa828e8297d3775dcfb137e8e7d0829dd5bd8bc2d140def68725c1f8898c090b67ddc2ed945f0f5afdd1ec7cfa2d469c6b94a284ced76c0c80b21805911ce9557564c3e4d6b7100cfd1f9960029027b02c1042a6bb1edb0c901f78d475f880b1bdd0a54eaa3111bf748489bed991f9e8eba7883c86d3216897e088715e4159ea897a6cdf9c45d9c93aa5fdbfc43bfc7cddfe9fb74dbe1108634b9ad72a47447d0ca4f735f8ddc7781c37e1a86ded7c332b355e8111dafa773f00381c29432e48da14f1bc304786e78d6fc153e575f51f70ee15ff90e13e521d01efb4e3e0c4c1040a1810399882ca5f52fb1dd833678e5236c135ce400353b5fecd47bb211b20aaa64050fc711a46085f662b1ce29a46f1f3476d32a36fcf675010cf969f83dd980d3745de80eb59510b7701b706ec868aae1b9652e72492b504e19659f1a3ba6b97b516e594914253278c1f6c7fd18be684a854f42a7558c8d8f3459fe374dcf8496e2f73df9318dd5cde0dc237c816909408c9288e4e5ab686fab41bd1c1c69f0134900a6e5b627d7358de02ecb67c8b4c3e85039ab68b8acc15bafa9d7e0db69bfeb1411ab8bedc185d5328cc7cbe653b859306e1e5711"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xffffffff}}, 0xe8) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") 14:18:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d26547299f94007a75dd1e42361d4fc50fcc45043890f155ce5b34601b7fe3e6b6616e89cd7bfcafb9167cc8bf2c77e90a0b280100000000000000d3a287cbecb868d9230cdc6a8e71db4fe371c1d89a4c7828ddf2e55b885900"/124], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 14:18:50 executing program 0: unshare(0x20400) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200000, 0x0) getsockname$packet(r0, 0x0, 0x0) [ 395.949646][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.957298][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:18:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x203) 14:18:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x100, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/de~/fUll\x00', 0x100, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xee4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000056}, 0x22163d0cb11ed42e) 14:18:50 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000020707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 14:18:50 executing program 5: setrlimit(0x7, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) 14:18:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x906], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:18:50 executing program 5: request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000007c0)={'ex:'}, 0x0, 0x0) [ 396.855022][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 396.861548][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:18:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800010000fd00"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:18:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), r1, 0x0, 0x1, 0x400000}}, 0x20) 14:18:51 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) 14:18:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001380)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:18:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="100000001400192340834b80040d8c56", 0x10}], 0x1) [ 397.419256][ T32] audit: type=1800 audit(1574086731.462:35): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 14:18:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0@'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr="b6eeb94dabff920469d573bd92064dbf"}}}}]}]}, 0x6c}}, 0x0) [ 397.530471][ T32] audit: type=1800 audit(1574086731.512:36): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 14:18:51 executing program 0: unshare(0x400) r0 = socket(0xa, 0x1, 0x0) close(r0) getsockname$inet6(r0, 0x0, 0x0) 14:18:51 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 397.672801][T15462] Enabling of bearer rejected, failed to enable media 14:18:51 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000080c0)=0x6df4, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="f67f986af9dc3ba1fe8000000000000087209739ae649266f062bcd978b94585b9bf1100ed8bc3b5", 0x28}], 0x1}, 0x0) [ 397.720000][T15465] Enabling of bearer rejected, failed to enable media 14:18:51 executing program 5: r0 = socket$inet6(0xa, 0x3100000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@routing={0x0, 0x2, 0x4, 0x0, 0x0, [@mcast2]}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 14:18:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0@'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr="b6eeb94dabff920469d573bd92064dbf"}}}}]}]}, 0x6c}}, 0x0) [ 398.012802][T15482] Enabling of bearer rejected, failed to enable media 14:18:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000002}]}) 14:18:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7a, 0x0, [0x4b564d01]}) 14:18:52 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="2f3e36f30f090f23e7ba420066b80080000066ef0f6642e6660f38f82466b9290900000f32360f01c40f01c9ba400066ed", 0x31}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 14:18:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0@'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr="b6eeb94dabff920469d573bd92064dbf"}}}}]}]}, 0x6c}}, 0x0) 14:18:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000000c0), 0x3deb4254893f4e, 0x0) [ 398.327482][T15496] Enabling of bearer rejected, failed to enable media 14:18:52 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x6}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) read(r0, 0x0, 0x354) 14:18:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0@'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr="b6eeb94dabff920469d573bd92064dbf"}}}}]}]}, 0x6c}}, 0x0) 14:18:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @my=0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)={0xa58, 0x0, 0x0, 0x0, 0x0, "", [@generic="4c558f9c64565c2e559f45aa9546d9a54be3d90efe574cfb18fcf7d9c91debbc33f3d66db26bd8e71082212f239050b7ed0ee24966dea4c146f72a8cd567acce98b07d6e93f99d5fc02307e4b274aa45531d23c55e8f834844321e6831af858668612bf98b0f5ce7a1e8bdfdccfea9d04afef9b62478dd650d5830c9948f131d5ce7fcff2af870eebe54c653290b65fbc66b272644ece6242251cb68de0b63d6a83bf41bba9135a891f219483ef8cb0744664bc69752545276d05d28da99b4f2c520be184da5650f3bc10d39bbc7b29e3dd3d7246fe988a9c8cb65cde8d4a378948bbfb2dac90c8ad82bedfefc", @generic="23ffb98f0b9774691dcd4da232d734298fe7d030e897c29a1deb9f961e843ebb3bf6077f0eac76ed649de9f5d2276be6dd8cd61c7e28812683a3b26752a6be30aefd9e91352e1d2cc043bf53d2d03d63f82ab25477e04af705ba3717b1b564b234ad0eb69bc0f99eb6e87a93046e29e52d7055dd5b771f38160c276016b9b7496402d77cb23e6e190fde7d05f0ce99cdb2324427163f2b5817bb2679f93745e99f524e7da62acff8ce4cfe3582dfa3c1d546ad210c42bf8a3aacaab4011d1389674a98bfa2", @generic="ea6a445f3454c88f25e88f6448cfc59a8f1daff7745f374cfdc4f23c215e4105ad5d88e6bc1fc9209bd8e06b076323e011b6c22d0be93d3c129939fc69cbfd667a6889cdafe0926438ec2b531e58da3823bb16", @generic="7c76269a8fd3d9f04b30ba77348f77d3a0c9fb2b2e594611d33014a85b6c7f8feed686cff413d232ebf96231e0", @generic="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"]}, 0xa58}], 0x1}, 0x0) [ 398.693190][T15510] Enabling of bearer rejected, failed to enable media 14:18:52 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000200000000706b7474797065000000000000000000152eda00000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000800000000800000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000007300000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000010000000000000000000000000000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff000000000000000000"]}, 0x3a8) 14:18:52 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000002000010200000000000000000200000000000000000000000a000300c8fe0b00000000001400110073797a5f74756e0000000000000000003511970000000023593e141db73a08808f3061e49729675b027d4d22412d8457412f66980c049c5242d879c1526c02a9a40de511d48d0d7363ca703b4b15243716a233ab3e00fb1ae3996480bb9981f6ef93f63f7a08c3fbefde3b8f851a6103b2710f1307555e77519084b39d54e38a83fa43b39f3fd5104dd920806a88a70b024d6f665c000000000000000000000000005984830f30c10389262636ac457fe17a084978b98b6bb0170e36e0b2a8ae67fdf00c245f2e1cb81d82b428dbf414779a28c5efd378d3dd426b5192613d270e0f2fbaa3c9f0380761175bd8c22141896124ba419c06ebbe3c9e93c7880cbd0161d65af6b5a73800205269c9c3570b83228c0f070507d54cca40620805c60b5cd33d5187be6fab29f515528eb0b9c04af7fb0c07556e0d43fe43f12a"], 0x3c}}, 0xc) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:18:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x300000b, 0x44031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000435000/0x18000)=nil, 0x0, 0xfffffffffffffd36, 0x0, 0x0, 0x8cb6654ab8defca7) 14:18:53 executing program 5: unshare(0x28020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)) 14:18:53 executing program 3: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005880)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x0) 14:18:53 executing program 4: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 399.297809][T15535] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 14:18:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009000100061d85680c1bab", 0x1f}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1f00000001", 0x5) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) 14:18:53 executing program 3: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005880)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x0) 14:18:53 executing program 5: unshare(0x28020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)) 14:18:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x15) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de0ff0), 0x0, 0x8) [ 399.673352][T15544] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 14:18:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @remote}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2d, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90) 14:18:53 executing program 3: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005880)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x0) 14:18:53 executing program 4: unshare(0x20400) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 14:18:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x18, 0x0, [@typed={0x14, 0x2, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x2c}}, 0x0) 14:18:54 executing program 5: unshare(0x28020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)) 14:18:54 executing program 3: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005880)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x0) 14:18:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:18:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='i'], 0x1) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 400.307600][T15549] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 14:18:54 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) close(r3) 14:18:54 executing program 5: unshare(0x28020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)) 14:18:54 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote, 0x9d0}, 0x1c) listen(r0, 0x0) 14:18:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4028af11, &(0x7f0000001780)) 14:18:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='i'], 0x1) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 14:18:55 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000007997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fff0f0000000000e455b088c2a08594e391798e4fd4959ba9b5a7b0588736060000000d463ea43084dc1840039649673b733890eb3db522d9e73a871a86cc8c8dda870000000002000100000000000000080000ffffff05000500000000000a000001def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 14:18:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='i'], 0x1) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 14:18:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) [ 400.983351][ C0] net_ratelimit: 22 callbacks suppressed [ 400.983373][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 400.995675][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:18:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4028af11, &(0x7f0000001780)) 14:18:55 executing program 5: unshare(0x20040600) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000200)) 14:18:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='i'], 0x1) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 14:18:55 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000001020506"], 0x8}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:18:55 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) close(r3) 14:18:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4028af11, &(0x7f0000001780)) 14:18:55 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) exit(0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000003c0)='./file0\x00') [ 401.623408][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.629834][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 401.648025][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:18:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) 14:18:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4028af11, &(0x7f0000001780)) 14:18:55 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) close(r3) 14:18:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="230000002d0007031dfffd946fa2830020200a00ffffffffa61d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b138a32052b44e099d881e02546dcda4cc7e6397", 0x4c}], 0x1}, 0x0) [ 401.943437][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.949782][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 401.956371][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.962742][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 401.969502][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.975878][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:18:56 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000100)={0x1}) 14:18:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000004c0)="1c0000001a009b8a14e5f46b000000ff1d000000ff02000000080000", 0x1c) 14:18:56 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) close(r3) 14:18:56 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0xfffffffffffffffd) 14:18:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x6, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 14:18:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 14:18:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x2, 0x0, [{0x7, 0x0, 0x0, 0xfdfdffff}, {0x1, 0x0, 0x0, 0xfdfdffff}]}) 14:18:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 14:18:56 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 14:18:56 executing program 4: mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) unshare(0x400) vmsplice(r0, &(0x7f00000001c0)=[{0x0, 0x26}], 0x1, 0x0) 14:18:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x2, 0x0, [{0x7, 0x0, 0x0, 0xfdfdffff}, {0x1, 0x0, 0x0, 0xfdfdffff}]}) 14:18:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in=@remote}, {@in6=@initdev, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha224-avx2\x00'}}}, @algo_auth={0x48, 0x1, {{'sha224-avx\x00'}}}]}, 0x184}}, 0x0) 14:18:57 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 14:18:57 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) move_pages(0x0, 0x2, &(0x7f0000000140)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 14:18:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu}) 14:18:57 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 14:18:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x2, 0x0, [{0x7, 0x0, 0x0, 0xfdfdffff}, {0x1, 0x0, 0x0, 0xfdfdffff}]}) 14:18:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x2, 0x0, [{0x7, 0x0, 0x0, 0xfdfdffff}, {0x1, 0x0, 0x0, 0xfdfdffff}]}) 14:18:57 executing program 4: memfd_create(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x200, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x86, 0x0, 0x1, 0x3f, 0x6, @local}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000540)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r4, 0x0, r5, 0x0, 0x10003, 0x0) 14:18:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 14:18:57 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 14:18:58 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x75d) sendto(r0, &(0x7f0000000000)='N', 0x1, 0xfffffffffffffffe, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) 14:18:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 14:18:58 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000580)={0x0, &(0x7f0000000180)}) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000000080000f9dbdf250f6c7b000c00020008f3b0c6b5c197"], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:18:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) [ 406.103362][ C1] net_ratelimit: 18 callbacks suppressed [ 406.103385][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 406.115709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 406.121985][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 406.128736][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 406.135101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 406.141251][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000000c0)=0xfffffffffffffe95) 14:19:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r1, &(0x7f00000002c0), 0x17c) 14:19:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 14:19:00 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) pipe2(&(0x7f0000000080), 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180), 0x11b, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfb]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000780)={0x0, 0x0, 0x4, 'queue0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:00 executing program 1: r0 = memfd_create(&(0x7f0000000200)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xe17a0ebf766f8df, @time}) [ 406.343295][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 406.349601][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, &(0x7f0000000200)) 14:19:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r1, &(0x7f00000002c0), 0x17c) 14:19:00 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x12003) 14:19:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x10000e0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x2000000000000000}, 0x0) 14:19:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000001000/0x4000)=nil, &(0x7f000000d000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:00 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x100000010, 0x200080002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="39000000130009006900000000000000ab00804802000000c6000107000000141900130001000000010000616be1bdb3f54a9c9464030d2500", 0x39}], 0x1) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x16d774a9df01be8, 0x0) 14:19:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r1, &(0x7f00000002c0), 0x17c) [ 406.943670][T15795] kvm: emulating exchange as write 14:19:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd80, &(0x7f0000000280)=[{&(0x7f0000000000)="1400000052008102a00f80854a36b8ab1c959916", 0x14}], 0x1}, 0x0) [ 407.032309][T15800] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 14:19:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r1, &(0x7f00000002c0), 0x17c) 14:19:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, &(0x7f0000000200)) [ 407.223516][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.229902][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:19:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2000000000f, &(0x7f0000f10000)=0x5, 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 14:19:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000001000/0x4000)=nil, &(0x7f000000d000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x10000000010, 0x4000000001, 0x0, "e5f9fe8eb2df5e42090cca28e805b2eabd7ce700a1468fe351a06e3de92acc3c"}) 14:19:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, &(0x7f0000000200)) 14:19:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xff52}, {&(0x7f0000001380)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f48d614fd33cebbc158bb2b03b5b2461179f5f90bba001b50806218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bcb860d6a0b61193d4a1cb622431d42fee5e91531bfdfe5cb19ff15d6d8923a3c231ea82fdf022daad60ab9f4b41d535a4e723020056de8c859fa668b046005fc1e44e4e4b7966c8bbd036be5e23eb4b3d4e3d5bf555e73c071f58e2979f98979a9035d620b2f300"/274, 0x65}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc57, 0x0, 0x6a, 0x0, 0x386}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 14:19:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000001000/0x4000)=nil, &(0x7f000000d000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 407.795063][T15828] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 14:19:01 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 14:19:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv-_(hainiv(rfc)106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 14:19:02 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x37a, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_mempolicy(0x0, &(0x7f0000000140), 0x8000) 14:19:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, &(0x7f0000000200)) 14:19:02 executing program 0: ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 14:19:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000001000/0x4000)=nil, &(0x7f000000d000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:02 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000016c0)=""/124) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001840)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000001940)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) r8 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$video4linux(&(0x7f0000001980)='/dev/v4l-subdev#\x00', 0xffffffff, 0x11400) r11 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r11) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000019c0)='wlan0keyring/:!systemcpusetself@\x00'}, 0x10) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = syz_open_dev$usbfs(&(0x7f0000001a40)='/dev/bus/usb/00#/00#\x00', 0x3, 0x498000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002f40)={0x0, 0x0}) getresuid(&(0x7f0000002f80), &(0x7f0000002fc0), &(0x7f0000003000)=0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) getgroups(0x6, &(0x7f0000003040)=[0x0, r17, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r19 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000003080)='/dev/mISDNtimer\x00', 0x4000, 0x0) r20 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r20) r21 = gettid() r22 = getpid() rt_tgsigqueueinfo(r22, r21, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r23, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r24) r25 = syz_open_dev$midi(&(0x7f00000030c0)='/dev/midi#\x00', 0x0, 0x0) clone3(&(0x7f00000035c0)={0x200, &(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)=0x0, 0x1, 0x0, &(0x7f0000003480)=""/203, 0xcb, &(0x7f0000003580)=""/44}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r27, 0x0) lstat(&(0x7f0000003600)='./file0\x00', &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r29) r30 = eventfd2(0x8, 0x40000) r31 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r31) r32 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r32) r33 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r33) r34 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r34) r35 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r35) r36 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r36) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r37, 0x0) lstat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r39 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r39) ioctl$TIOCGPGRP(r39, 0x540f, &(0x7f0000003780)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r41, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) stat(&(0x7f00000037c0)='./file0\x00', &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003880), &(0x7f00000038c0), &(0x7f0000003900)=0x0) r45 = socket$pppoe(0x18, 0x1, 0x0) r46 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r46) r47 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r47) r48 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r48) r49 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r49) r50 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r50) r51 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r51) r52 = gettid() r53 = getpid() rt_tgsigqueueinfo(r53, r52, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r54, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r55) r56 = gettid() r57 = getpid() rt_tgsigqueueinfo(r57, r56, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r58 = geteuid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r59) r60 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r60) r61 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000004280)='/dev/btrfs-control\x00', 0x10200, 0x0) r62 = gettid() r63 = getpid() rt_tgsigqueueinfo(r63, r62, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r64, 0x0) r65 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r65) r66 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r66) clone3(&(0x7f0000004440)={0x50984000, &(0x7f00000042c0)=0xffffffffffffffff, &(0x7f0000004300), &(0x7f0000004340), 0x29, 0x0, &(0x7f0000004380)=""/41, 0x29, &(0x7f00000043c0)=""/98}, 0x40) r68 = openat(0xffffffffffffffff, &(0x7f0000004480)='./file0\x00', 0x2000, 0x80) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000004840)=0x0) r70 = geteuid() lstat(&(0x7f0000004880)='./file0\x00', &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r72 = gettid() r73 = getpid() rt_tgsigqueueinfo(r73, r72, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000004940)=0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r75) r76 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r76) r77 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r77) r78 = openat$cgroup_type(r77, &(0x7f0000004980)='cgroup.type\x00', 0x2, 0x0) r79 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r79) r80 = memfd_create(&(0x7f00000049c0)='ppp0loselfcgroup\x00', 0x4) r81 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r81) r82 = accept4$vsock_stream(r1, &(0x7f0000004a00)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x400) r83 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r83) r84 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r84) r85 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r85) r86 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r86) r87 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r88, 0x0) stat(&(0x7f0000006240)='./file0\x00', &(0x7f0000006280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r90 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r90) fcntl$getownex(r90, 0x10, &(0x7f0000006300)={0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006340)={0x0, 0x0}, &(0x7f0000006380)=0xc) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r93) fcntl$getownex(r1, 0x10, &(0x7f0000006500)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r95, 0x0) getgroups(0x1, &(0x7f0000006540)=[0x0]) clone3(&(0x7f00000067c0)={0x8400, &(0x7f0000006580), &(0x7f00000065c0)=0x0, &(0x7f0000006600), 0x20, 0x0, &(0x7f0000006640)=""/84, 0x54, &(0x7f00000066c0)=""/216}, 0x40) r98 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006800)={0x0, 0x0, 0x0}, &(0x7f0000006840)=0xc) r100 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r100) r101 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r101) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r100, 0xc00c642d, &(0x7f0000006880)={0x0, 0x9d3cda652a811495, r101}) r103 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r103) r104 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r104) r105 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r105) sendmmsg$unix(r2, &(0x7f0000006940)=[{&(0x7f0000001740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000017c0)="eff81b083d995398461b2c052048343e27b356f32d9c7cb7016cf595c082bc3d0efb88d9004202c68d09423dbeb7b4fcaa690c0e01d9b4772d32b9ed0b9bdc8c6ed6", 0x42}], 0x1, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @rights={{0x28, 0x1, 0x1, [r8, r2, 0xffffffffffffffff, r9, r10, r11]}}, @rights={{0x1c, 0x1, 0x1, [r12, r13, r14]}}], 0x68, 0x10080}, {&(0x7f0000001b00)=@file={0x1}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000001b80)="a814a40a378e8dd80eccef2529ab9e27b7bef4d7e7e67e88314fcedd90ca9df92c4e5aac399d57087a7dd49495e12ed1563ab71d9ba9bf590c93f009c2310c62d7ad64530e6dd10dcc3f6a7c95ccc26651a062852678a7c3da8f7d24b94cb68b5d97b7689c00658565e71b172a4f234c4904dcd6fe1f3a2b56b2829d91eff3ccc265d9d9b8d85967f13eb1482258e9f4dfb910fa0c9d98b1cde55e3ca2aee79d451f6568", 0xa4}, {&(0x7f0000001c40)="929d6b8569713907090f375c273f277fee6090fecf8f55943146e008fe4614d4c001b77793d2484e7771d341be91f9a6ff558ef5ca5862d8c37ac5239bdeca1fe72aabf46f56443ba08764a488b0e23f4c8266568c8b93211479b94325031eabe53689c21038e02afa699b5aeac3448ea11a69b671571d9727c6b960b9a1d22d2574e8e129a9910a88cc250b7ebc2c6be8", 0x91}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)="c880b315e4effd", 0x7}, {&(0x7f0000001d80)="1850144a84acbc6f22989a9b96bc5f6e4341411930e6da3cce1e835d32682796eeca26856746cb7f2cb3d0dcfec58673a9372a4e6cdc3ffb95f003821237b7d8433168ce3a5088b5ed8686838c001d7e28cd19", 0x53}, {&(0x7f0000001e00)="8c69cc9cc3377046a059ea6a79ed57d581f28b328ad088702dd6e2a7ee9aab9a7f6666f3e45041984a7fc2d612d04ecddc12e89396a059f980e8e5eed3f0a54db9597e1ca66c4cca8c27f6590f8a6eb6fe67a9eb305800e29224b542b5fdc213bbdb3c1e669fb87a83f82725690d561a87dd30d86b237d1f049591b3c3ef40455b31a121f1d8ea03b96b92bc426b1251f03e6af9ac094669", 0x98}, {&(0x7f0000001ec0)="0885af1d412e5b515d962294103667f7c8ab0eca383b239934fe4e4b80e67d6f4d6b1f6456506584c7a2d22a24946e3a33676bc5ce0d92fac3f56a44b1f159e5bda8b7500540f8ce86600a7955cd00f17dcbbf309aad96364c0d9e2bd191c46c343a2bff47b2606251d994f05e0deabe924aaee4d7ffdd0a2f21eaaf18097ae8688f333a0d61de8a429b26d0edf592befebe18e9cfe7c86b42cae36f7cc4a1324574a3bf41999e77c26d4f78b26172269636f5488e4199138e17b20ae47b5a0d5595b138565344870e54982f917430903bab2736ca1dca139845a6c63769e38925f4f962ea4bcebe39d6b13751e0064c084795388ebccc05e2df82d291030efa87869aceea156a038e958ad36651e992eb77dbf458e2b5bff6e54704d35db9cd4e5536a1ec4cb4dcdd59026cf7661d06315da3ff8f51b900deb16616b8c6aed7f1a5bf895df5d34b5a7c973d71d76642c7e652485a8d0d1dda051c37e53ec2c534af0fc7f91a61ab1a3c0a46be25a915817ebfd7bcb6d4f8fded705150cc512bffac7b94bf13cdfb8d8c5452d7aef7450eedf679058d8d925a1f99eb56619fcae84d2af529ca7cb86ec4dc1a275508d29a13aff448f78625fd46fa4f96318a4040ae4b8ed4f80e35d6c588f9ab3d66c48743ed87ba49de7711dedd095c6857d77ed556c1b53083bef7e9873f11b72cba9bf543c63efc346255d92fabb83ac6f420f9ece2f1e83be9ab4f2c4c5fb9fa680912f550cc52be5633e6956d668b072b47e839efaf341fd326969dc288cc84de375bac5029ca7d8c4800d622718df7d0c9219de95ac1f2daf2b79c69cf24586b195cb810799b60cdf763c301fc58ce6ec776039377b6df6ab4fc992d6d4c358b70427948021cb495a968878b2d3c95f680a0e21528213a9c9bcf1795e6be0785936a724aa2510d91f1f8d006443093b5edc53dfbbafd5b14f26598efb957521c95a87dc5a3bf00c9c50cefaeacebc13c0cc612f6a6a85ad8fe9237585d81ef1d8bef93238db1023d57c075a0022625ce53ba7dfbe898d3211237afcaffee26559597bf26a87d9bc588da580403b2ea712f3fb58560dd74f6d0a452e20c2b615d2b15417b248bfbc9005e5911c8b9c64ffdba4b4ca411d9ccaacc1526e1961b42d66e1e040d7a47b719cc5dd52b6c55aad330bd979cf888b663f938280277da00175f5a2ca527c6d5ba758a2e6dde1fe0f1b42aa325e39eee6282372952e5eab9e5a36a5b762c75d650fc016d8a261983e1a6e46695b7f991eeabd57ff24b42c65424a07267e222194e01e6d05b9496f82a52f4d040759c680e883642deab725a9b3f0e9889c71b361a0f9d7d2d7c1c87cba56f77df046b1b05d053aed4550043bbcc9dcfad7ba157c56fe38724afadefca068453375bad90caac134d4efa6b34bc49348388762b2e40ab23062c9eb80fa2c08de8f025360a8a65f57f590b848484de33fe7ce602713dcaf4e914966ba20c77a4167332c0d28f8857044f2e7d4d93eb4105958388eaab87d5718e396e99182d30d43490383ea1a10b6f8d5726f0a016f7fc94d05add9093a4f062c96cfafa04414c15e1107224e7c2e9e7674628f2e704f7f5e339d2d5f8ef9eb4591032a21f921a9095009c6cedbe8a390f0551de8df70e3012434191c4ce460ce91b0ce8f20dfb3359bd15d0eb6bb6f4b3ffaf55e3626d6ba04294ccd189339aac193ad19ed3854e6832d032b33c0aca63088cc945ed7294949a14838d5c80ea694c81e49ee1c5f0e7173c27dd04c9462c34405a3c5026a444ed9e889ab2587de2af58f9f945ee81e48a1d94d89bdd5d7fba4eb7208530a7f1eefc167a14a16b1b48914a97d5d9a7d6bf01047422526a03b4f691a09a32c8756f179305285a2a75fdd00710e62a9e69a49a225b52d460b58e0431d753d952d056c119faa50e2177c95530559b57d908c72a82e276b11cc32697103b7f65d711ab10d07ef88aa2aeb744e33d34a909ceb0e49feb1ed135cf9ce7a1c1249f94d84d1968cac3eaf68fbad8819c259306b8c8a73bc9ecd0bee6ea336b421eb322fa2f778a5b19d8941493f163808688500a8fa51603fbdc188566ffdd3cfa49b1c43e82cc3420c731e4e6e933aeac82298e2588c0590c4ecc2d30a0a5841048a71301653e0dad5f5edc245f934e0c909c41adfb26bedd9103f03d4b980891ceb69d1aa52d3156c85a7a0686f427986535130cf3cc6a28e9f66b5e035de8668255482e8470e7fc470118f27efd16f3d18d75053ac3a752765496a9b91a3b946fa0c997e44646617f7219c431c4bebf44fe88dae0270e79fe1aa6fc4d346354173edb7a04f577cc8a488865330fb452f39897e43b98278348b920fb4a302543c92c91b95c6c755dad0aa369b414d2955830cd17eeba743950421c805aee7898b9636096583adfba4f9a2ae0e438ad8e3494326c535f4d45013fdb3d86d968787b6c8add649d05a2af3629b8091f6f568bdfb260ab708bbe5ad73635c5772abcdc956dd0b74d8e9f1938e7391892b28043a26429d250a9c3a2135e8c7a42f5bb7831ded579cdb0f1773e1d2a0ee96b8ddf36e86e4d58693b212c6206cfcce2992cf9cf28908128eb125243ec43a13fae576a6c85556175b1427335584dba4e3d97167b138ed57600d05904eea3b35f2a16542be72bbde123befe2d687c524aee6735ed85f05b3cafe519623846e4093dfbeefddc7e7817c9378dfc7ef7d3a9e61a6908af7840c082aebdb6f1035b174fe132d02cdcb7bf49bd6399a79a8b68ace828868f30e860825bc70b72b0b08ad071c12b8b193bb191d713c0c1f020b813654640423dd258d8e8aff72020c40d11814a1c6f7c4fbcd7d77fd2115aca430fea632dccc9753475b4ea910eb7619cbdc2955d140b813a5f5dff221ba55bb166a23dd2dcb42d6a8158b6a74ff0fac87e0c83c184eb7dc88d0afda41d074be4b53fa4756b3a8279316d05124c3a7e7865c2ba1f58e8ea8e77b73f83e392c8b188566a6bd2c4620fd4101f9895eb9bc7ded9d9c4763a4db20704c1964f87ab452ee0b36fd0145c14aa7e3904b45ca3eaaf247a42e1515b8325a6507865962f4b8b92431c814d66745fca4f807a7c0ec67b748f6f42731f9337d64466700b3fef86f0abcab57222183ebcd727cb6c584aacab710267b63e625e9d02c359a71404a20e4d3c2f8090083bd95f78f3d1a572ababfd2a7bdb6556a09108ab41504607d63e120479dbf1ac69e17be886252c5f9c3fb87a1b873daf84b8d16becfd30f95521232bb64feb3b8afa88e0075453eae5fbd4aa263c01726bc133f32d28587244ea97612621f11f78c334b5ad3d77a16f95f10421dbc641d408a33ad8c4643a54fa2f8bd6a6778aa7af9f799c754448f52bba943d236d25b1e86eab12d7e1574010b8ae3d44eb3e2a4521eba539f3382565c821bd297e9835d6e140d4803f3c16a9f4a2d3627a469677e93dbb07d6dda2f5fec972e3c218b7d200a8cd35ca4b5e92efa3fd17ea1f6490db3309236b6906db1b92f6725446d73dea3fa31db747b2e298f6f3c2f2ee4777ff3a0a3db05100900b2abaa8985a3fc9d5de70c77b8b8d14b4aca2bc9ce7045e48f9af9d6795e8090f3fe0309b3b6acc7b2382118dd948c4c647aa04e7bf0a4cc3441b9d87006b174cae45f1007c129dba4ad1270c664f2c3b17e7f894d95b1bb95414f1366af48e0706dd76ddc8f7f796450f7880868cd2c2becd970f3bf5be9ab2f23a6022fce958449657e1d7e7a7d2ba1ff727abea32fd97486a8def7d688fbe9b0ca05f63c4d13c9abb0d784927ea3ff3f01da878c9da345c3fa2af053ae92d7a52f9a4ffd1c84c8bbdf0f2fdd6facccf83b85f330d61d18dd4f39728d66b959369fda925375766dd4ac9f12325272abab5689949b94aeca75387ffc410429e9c4607676b2c247a484f46189498f065d13a893ce344ad8d77201df7258f494f5a7f8df6ff1d83f61fc24fd4bd49c4b805ee8cee8694d4c4b20249d9f842f44690db5c3a84b9c72efde967455d0c101ceb30a2290eb8537c2fd6f93c557116ae1b769ab7124c56b6f34c4e356a63c6faa55af90ca9079280e2cf2347aa72df1d6b3cd71dc6444cde450a4694f4c72a86af2233b64420150e9382936bd17088d90e72e10da6bfdd23d349ddf9b1b15cbce7f47fe44afa25f75e8cda853c7ddd987c6a918c3e69cdfc0f228077b7a975c1f1de8d4e9f2f5c9ff3034798a19c50964214ccad8aeea19ef5fbfaa57f96827d6d75c03db9dee694aac989f4374510cc64aded8dff12db071525ecbcd5a550161fdb831e105fcef8dcc295dc907ed6ab6ca7182b32e20d1f713a39d4ca2637178424caeb89efc0810e09e1b465997dcedc715792c9a126ca3706482017e281986347220e1c1dafbbf1f0d7afbd5c471b5a9c81a2b919e20d24c83039052a4f8675960228ccc6f9f97290335393b35d75970df0e216b84672b17d0b8d142696622ff9151fe28c8bf7e22cca50e1b80b462336229ecd90cf5a0094fea6088cba59011bd93139e1d7c41c682238146a0570ae1d5f73735101036d3b55d27cd3c3ed10fdf11d5f00279b931f5e7636515b67fb52018937f773f3f6d4db2f3f73576f8e6abfb6e08886e90983ea780d0f541e8a0dd523028b1b8150b741d31b228403bc81566556da463746b8d4f1f7bfd3cb69187f83efd9ac5ab5cdb593b28a4aa52f25064b3893b49bf464d261ab35bccb8081cef023e0559eccd8fb05d98cc43883440ba14c148ece1dbe060d3159811ddf6bae8e3b4097f70a37086c47aec21856e4d864e667a7592e41bf56c94f7aaa05038d024550bd19bbc264f19d586b636424fb7676ea7df875fa5704cf086c263e8b339ad9a9ba89e04972275df2d5f676c65f3056210dfe31fad054171e3bd5d09cd2eb7e8f98cb116b9d8d9cdb65aacba72a087a05d2e3d39082ff445cf02e2ae81ab762abde6da5d9b4523e60d80a892f0845aa4d050675893fac9fc74d66e26f776676bdac5a32e77c9c2969cb3c1209f21f1e2782790d2b3d7e50f9bb016e4d0e94cf24d6565ac72f8c9b6d81c5a9f6661eb24c789f5dfd65562f02218dbafbd2913ada32a996ee0952f72eb2294041bf88cf0a75006756cc334aea5828e671d20ab4281ba3f30a7bdcb38270a1f96389bfee093974baa01398ea1e592ec06e0f0b47f487189467168a7c0067ffcfd0ef16f105d1cb229c77c98b1a2747d4bbb7c5189cb5b4ffbe1b6ee651a1d06d609a4fb78865ab79b7f93084a40e2f92f768194a392f31c66233d57e67a5b16bd2c49fb277880b5b45bf3140fa51fdb8bb8940c1c1788360de1e9626dabe1f273f08fc44eda2c0997029950b49a6fc41acced6d679a8069a742f483959204e81bba1b0484d82c9c2552091062fda7a59717d65711f2af0b462fdb95114e6ccff5f6b6d95f7bf6975b93e65def6d57d18ab809e1625406e73382ca5ca8772b0f87ab2b31ac0c33b2c816617614c4c3d371665c113ea8bc5b8a929e856cfee14aa3cd729e4fa5f625bc8fb739b874dd9b978e679989a64ee416f33c62335c48953c7b9489ffb8f7b7c66c9c2bf39cce7819dc113f747a39ea31ea250554f52ab8cdf5d04d9a66ad37305cc4cc8686f803b1cefd5904f7f6fe3822441de46bd64146b5c4f81f1925e7386b8fc24f911abb4f8d409ef6f9044cebf375c89ab5db522b432ff2b3eb9ee7db8e2ee9f9301fdab5adae1a6ff77830a0c978788e0401cc2a1dc25f7e477d9006bc84766752ef1ea54", 0x1000}], 0x7, &(0x7f0000003100)=[@cred={{0x1c, 0x1, 0x2, {r15, r16, r18}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r19, r3, r3, r1, r20, r3]}}, @cred={{0x1c, 0x1, 0x2, {r21, r23, r24}}}, @rights={{0x14, 0x1, 0x1, [r25]}}], 0x88, 0x2051}, {&(0x7f00000031c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000003240)="52063172382a2a0ff715e9d95c12f647d4618519d90969b4639015b70996abe50c401cce3e44a1e12fadbf7efb01576e7e78d5ab3329315191864e0340e05cd002e752ad154533323077f8f4cbcaf2cab09fc2c97761f500a78b8bcaea5e143456bd60871ccf4c5b578d9256a022e19cc267769339afac0b0c73be40f2d228b37d71bf57fbd083332032c00716", 0x8d}, {&(0x7f0000003300)="f92139e28050f297da9844d26f0ca51b04e17799a8a04714c6ded6f8ba4f055213de5125c76f8919445d1a29f2184950d5281d5d675c48ef5e487f708cebca3217fe99fe1ddd545bab952933fe", 0x4d}], 0x2, &(0x7f0000003940)=[@cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x34, 0x1, 0x1, [r29, r30, 0xffffffffffffffff, r31, r32, r33, r34, r35, r36]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r37, r38}}}, @cred={{0x1c, 0x1, 0x2, {r40, r41, r42}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r43, r44}}}, @rights={{0x38, 0x1, 0x1, [r45, r46, r47, r3, r2, r3, r48, r49, r50, r51]}}], 0xf0}, {&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003ac0)="c79ef040eee52c22277208be02b130c26ac7ab9195b9eac32fdba28afe371ac4389bd18647d086cf7e9d4347f7d7b1901500dc9924194f5758f1770c57f550c2d163e884ca84f7446ac5df49600a33bcd66777331ddb518f591d", 0x5a}, {&(0x7f0000003b40)="41860631528342f201d0807510a2e137f89583d9caab03f3a02ce904b42fffe32cacc0bfc0e741c78b826dcf170300a94aabeaf9ac3ade5a777f8163b571ce3bb49346dec6f96c982b29f08674c677cb6350fa2cc57855d83f9f449dc333e040da1bd84c3df87338ed3cf194f7a19bd3d1d78ac5a352360bf05feeb1b562cca91e47d6ec1ee5538856de3d160965bc1ed7cdda3c4b1903f78cb4740e8471d4df3d29212fc9b843e1a9", 0xa9}, {&(0x7f0000003c00)="a093ad42940ca85aea36f1d1f0c29439e0c4ea5d1a00f42f6f23fd77b5f819c8428249e98992605e3f82fde749cfb7e3efa35a534fef90ae5e095e472ab37f4e8b310b1268dff3b9a7d3584e5e023b690de3366f66a7c9ec8531b084ff6e263dde34fed6de1dc95acce76e319db290b2c5ab3e8468b82454b3bfb45cada7a01c724ec96ae96a70791cc8c05d", 0x8c}], 0x3, 0x0, 0x0, 0xd4e550925b2b4e9b}, {&(0x7f0000003d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004200)=[{&(0x7f0000003d80)="afed2667c499772596505c64cc837961eee0acb3d7efee594d3d1338dd081d9bba4368e77d9c291a8df981afc61d7cadca124120709a8b493c17d504d6c82083e694061fd245e6aa78fee165044b9e42f88603cf8cb2904fcf138983ba82511309ff4c892699c439c0b34ced3f539746db2a2b7ace", 0x75}, {&(0x7f0000003e00)="3e826786084befa933d8dae9c63edfa8b0a2787e1986743b3a1be8d3dee777cbe2e9d73eb6ee6b66ef69e561875b684535d4d5c2a791aae7c13e7a8129ae72cbe6e8a02812919716c7696ec29d01e0683335f0a255642c532e3eb76d302df60da21636", 0x63}, {&(0x7f0000003e80)="314ce4ceab04ff92937ea6bebaab3cd461a0924455694cbc9c65f3fb46ea156febff834c", 0x24}, {&(0x7f0000003ec0)="0fd7d1ce27d912cbebe8c367b1bea7ddd43c595c8fe5df3e972f7d548e0c95b78c1fed3d7aead4f89def5f6346c5d5b795a02ac3d8a46ba972585b084292c284260c5984f0ab1ce29cc18d1b12bef7a6460b5e76dc4edb92c9c3f31b382548", 0x5f}, {&(0x7f0000003f40)="718faa2f62d0f77bc54cf73b3e1d1d3a5f0d928ad6b3e2a6ce52cc8a192c83c9d30d5dca3d722730433189b71700d0a49bc6886f53bb65a07732c6d05ce162584cab1f13f96e7fa6ae4799136eee27ef1588c9e17d1c92c89bb9b2000eba0a725c2901e8955881b5958d7c61888be0842952bcc8510195e72a3a780d6f5020d15061f205c6a72c2d90940f812a538bc39f910e9ead65e3a7baeff14790d259a0d3d459a20fd69aa19c8482baeb2b3d43d6a8ac44a26c98d256f405644e59a27f7adec5480a34f156e3d90135adb12adae85726e45a4e1466b0bd8827bd93d327913cf116ace0", 0xe6}, {&(0x7f0000004040)="cf664884d2404bf2ac8f8a44826312717a427a83901d6ca2aed2411b5f0b2ab1d3c7ebfc375ba933afa3e20c6aee933508b4dfb8db4738c8598e4151f42f9071e093edfab4b7cc05ebe362a00692aa17d838a9895ce67a1d9aa8ee739e59a799fd36965c0f72b2286035a3cd7cbf93b0ad94223908b261b0c8d5b720d0b4d9a4c6e52dce75c26eb1df9187f1e0482ae86e676628c76a8835cbcb3ae2d875d02245224beb56c8ecb33a3830bbb413921df979710986bbd1f97466d1453f10cb68f86a72713e442586bc", 0xc9}, {&(0x7f0000004140)="a16eb16805f24558ed0ba6760c994f9a0799ec0194ac72957b4fb0229114be152f653e3bb18406353f45a981a712d2212fb0b5f9f512f1737930381a8c82db2b1ccc765b159454a793aa121a1986a156306a267a2338e95757cd77c93193b27fb28e887f40e05ca3885748e6ad9978dbaa5a4df77cce8a964e7b71fca0fdfaebc44c8a99b373567221c11150f59700453dc71fc629972f4fd06744f0f9e983803d624cc2d1237e03acf5e442d28f9774c5f784df", 0xb4}], 0x7, &(0x7f00000044c0)=[@cred={{0x1c, 0x1, 0x2, {r52, r54, r55}}}, @cred={{0x1c, 0x1, 0x2, {r56, r58, r59}}}, @rights={{0x18, 0x1, 0x1, [r60, r61]}}, @cred={{0x1c, 0x1, 0x2, {r63, r64, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r65, r66, r67, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r3, r68]}}], 0xb8, 0x1}, {&(0x7f0000004580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004800)=[{&(0x7f0000004600)="7cef77193005d3dcbbd36c76ed64c9d7044bfdc11d6330c577d2b625d1ffd8433a9bc570dedcf10eed733ae4472dd6eaf7c6d35b1f3fdbf5fc28cd814c8baa2287b6f9b0e758e07d14df392b0250189295efa135282d7536a27913e85a35b32a36066ba0c07c878e577955b1110473f3aeff3ce8eb2efa07e9737ce9852dd9efc31ca9", 0x83}, {&(0x7f00000046c0)="bcaeac0d898e71171212657a2aed0966c130d8e03e57f1dcb78556c0ab4a2309b23fee3b49e4e9dd7a6b43132f29f541839bd91acafc3ce765070f91e33516e8d1c9badca4c04792418647516172fcb7c76db1749db0d2f924aeca036c611d1da0d65974475c2a9229543021fcc3b001bc97f6b5a7d22b8cbb2ec7ae785c17fa5ec3", 0x82}, {&(0x7f0000004780)="5e6945c36d197e55f4e4229d90e3e80f72ab5818dcb55cfe596ab4cdbd57b2ac5a6229416798f0acf38ebb769f04904b4b9b5ffc9eedd942d086eafe003aab054c035df3bdddf6f059cecb2e803ecfe14beb8d10c8aaa9ae4864b4de90bed29b", 0x60}], 0x3, &(0x7f0000004a40)=[@cred={{0x1c, 0x1, 0x2, {r69, r70, r71}}}, @cred={{0x1c, 0x1, 0x2, {r73, r74, r75}}}, @rights={{0x30, 0x1, 0x1, [r76, r1, r3, r78, r79, r80, r2, r81]}}, @rights={{0x38, 0x1, 0x1, [r3, r82, r1, r1, r83, r3, r1, r2, r84, 0xffffffffffffffff]}}], 0xa8, 0x44004}, {&(0x7f0000004b00)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000004b80)="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", 0x1000}, {&(0x7f0000005b80)="35b88b3f5772a6e66e317c580e1d70b485d1ec10d4a97b2eaa106afabf8fa412d03fde267b9631e9ef34f4090b43e1fafde46e930e943c4c334fceb1bf46e31bf97d23c7490f0af72d48e492079a2512bd2a98825e86fedef5bc60631e90b36f480f1e2d04cb2cc70a66e97a4203333b1944eb47e8fd2eec082f372a1cfab82ff5cb79570d9fc99f6d09ab214b65b6a220bdad1257912e7e655ce3bdee914bc3c3cfe16e2163dfb0cb28ede9a8db31", 0xaf}, {&(0x7f0000005c40)="1f1b45817b35ddc98e4daa81588d9a755d47d0fefc40893870d35f6e57e597c33edbbd4969646cfda842eddc393a6343c015f0ef24f0fddc571ac1a83482fa3ded178afbc243160865d6dd7d0d66bb80d409c075da75b97f21badcfbf9c8ad94692a0d9221c50d9af35c4b59d1976a9af51fd4dc462af2268dce946a32d90ae1e3a5a3f87397c9ec3b193b916ae0bf66d968e16b865f97af9f1f53c382de23c8f2dfaba3076f29dc6f0ea45cf9e366cfc3293cd02ef633c29537bc47839201", 0xbf}, {&(0x7f0000005d00)="f57db1de829a91561f7f362aac028c8003fb7e5bccb67a24238a5bcf866991604d979f64108f63a38daa97f8340314876f23d39b7d1a42532ab995f1b7ca21448c872e6198e6e0e730478df6b5622b974828bca61cceb8f57ed8a0e0636a57b28fb6911176f4ae28a4514ee1d931926280fcee46350e916261b94bd3825d88115be957d063cb32586ae50e9a257d6b5ae54df7e07b36ee24ab979cfd41e8d61e9b47fa06", 0xa4}, {&(0x7f0000005dc0)="5c849b0eb815c51ce9f0c94098f59219759645fa16d866eaa16575baef48908ace92f3579ce5539723f9885c4a87c0ef08c805c0a4966b275d6210477338f09d2168d072b797af074a51518976a0a5357e2c15117fb553df97d2b8fed8079ebd55c7605954d1df72aa3a2766a01376a4", 0x70}], 0x5, 0x0, 0x0, 0x1004}, {&(0x7f0000005ec0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006200)=[{&(0x7f0000005f40)="bd5422cd86720e6d01c858dd7d61e4de29dd01d5f7250fb84e38c8816022eb6482a73aa0a914957614c5d654f8d4f0370896acdcc165525956fe1b2115fa8d5af36e9f8743eaf3af7b54a318cb80f4ac7d0ea364cbaa753a9a23f851b5da339b2a515a4598b1db6183d4aa098398a5042537739f2fa61d9888833f641cd0cbdb80a57c53a0d932592dad959ed40752d07f5d59987cdb918a66b8cb9fab4b77c67651d9d36b221fbbcc7253ec96cd86d56c7b25", 0xb3}, {&(0x7f0000006000)="d23c8600f25aaa791c6298204c01d915dc72179610930180d7fdac7b19aa73b47419e3f0fe946c51c0fa3a6436b58515a2aebf308c4f90df2e04e13a9ae88376069b9fdf614ab9bcfdede5c91c3f89dc7e76c6b8a91d03c6c737972424e6f6c3433c64358aed153aa867702a293079eda3c197d1d35ad77fa2218f2fa9c720ac0f13d2e07c50791c5f4b068eff3d3c0ffcf2bd668d7ec5a2a525522872b40eb30dc64af86ee56cf539899e34d9c4a85831a39c320ad939e622c192e0b386dce1d99808a0a262ff017145e588a1cb52bf5dafaaff77ed8cc02119bd59d70fb521d620a063bb2701", 0xe7}, {&(0x7f0000006100)="a302bae2aad8c4e85ac984fdf8163186619bcf452e516f169c47a94210426422d3ae64fb89102fcd43794963b72f142b1aade668eacade1c0b0d28290998c5d11385e2034cd8292e082b818962fe45179620b8cdd87e9efff946f17c5858e5efa977a6c146e5874e0ed7cffe6b218c70a47d79248ada2e08ec665ede9b2fdcd9b74c77037ec97b42156bd34743dc9b02bc420a9cdab4150a61aa4877f7", 0x9d}, {&(0x7f00000061c0)="559e493e6235eb56c57c7be48be42305a054383018ac668cbf6b5bafe8", 0x1d}], 0x4, &(0x7f00000063c0)=[@rights={{0x24, 0x1, 0x1, [r85, 0xffffffffffffffff, r86, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r87, r88, r89}}}, @cred={{0x1c, 0x1, 0x2, {r91, r92, r93}}}], 0x68, 0xea79b11e83997810}, {&(0x7f0000006440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000064c0), 0x0, &(0x7f00000068c0)=[@cred={{0x1c, 0x1, 0x2, {r94, r95, r96}}}, @cred={{0x1c, 0x1, 0x2, {r97, r98, r99}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r102, r103, r104, r105]}}], 0x68, 0x20000080}], 0x9, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r107 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r107, 0x84, 0x9, &(0x7f0000000240)={r106, @in6={{0x2, 0x0, 0x0, @remote}}}, 0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001600)={r106, 0x4, 0x10}, &(0x7f0000001680)=0xc) r108 = accept(r2, 0x0, &(0x7f0000000000)) open(&(0x7f0000001580)='./file0\x00', 0x20000, 0x4) r109 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2800c0, 0x0) ioctl$TCGETA(r109, 0x5405, &(0x7f00000001c0)) sendmsg$inet(r1, &(0x7f0000001540)={&(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)="4c61fb9128867426490061f8e784ce3835e8df08970be19ad6d80074891f491545eb0486b8742f644bdcc791779df9aa91206fa97b326637187f7eee21e984ab3494c85c2d5d10465591530844f7b15e72137a05d885b8ac7e1dc86858d23ec0702b21df4d72805a4b92fbe0d4b4bb0065c11d96351b3d198861600f4f0ef0ed7bb365ad7c1ffac4b8ba4bf5ee", 0x8d}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="29630a1d60e81d058eb02d8c8bffbe7343812363f042568b1ad3e0e56d1569b738d027097c9a2b025b888602", 0x2c}, {&(0x7f0000001340)="808f270d9c1a88d4c577491d289a028ef100e8708fa18189c368433cbc75876328703f98575eae7568ea05b0b9b97cb0c6678ef714d17df1550f8ebc171c8db70ed7d9a46eb743370029d17868f0227b3bd21f272752535131bfbe61fe84b1d88e6bd3172032a649ca0a62985c354dc34d9f138d3ad4f31881ff16cb5e7ca286a127ac614ade188f874c689e4cafcb4e6e1f1d3cccc6669c25c49a70233040f85ee802", 0xa3}, {&(0x7f0000001400)="fddbd9fd35b87b1422b3990697df2916866e2bb9c8fb58af9086baba79d8ee6a183d9941966a32fdaab4aba8a23c985508f80aa48401e786b3bf7700459279e61b9486666e37bee65bcaed2c535c7fd5e768d059f626703c7138dae3ed", 0x5d}], 0x5, &(0x7f0000001500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3c}}], 0x18}, 0x0) r110 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r110) setsockopt$bt_rfcomm_RFCOMM_LM(r110, 0x12, 0x3, &(0x7f00000015c0)=0x11, 0x4) r111 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r108, 0x400448c8, &(0x7f00000000c0)={r111, r1, 0x9, 0x1, &(0x7f0000000080)="bb", 0x9, 0x80, 0xffff, 0x4, 0x7, 0x7, 0x7, 'syz1\x00'}) 14:19:02 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1f, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) readv(r0, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/85, 0x55}], 0x1) 14:19:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000e42000/0x3000)=nil, 0x3000, 0x0, 0x100000000032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e41ff7)={0x0, 0x0}, 0x10) 14:19:03 executing program 1: stat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x100) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:19:03 executing program 3: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280438dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) 14:19:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0x5646, 0x0) 14:19:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x3ff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0x0, 0x0, 0x0, {}, [{0x58, 0x1, @m_skbedit={0x54, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x3c, 0x2, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xaf4c}}]}, {0x4}}}}]}, 0x6c}}, 0x0) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}}], 0x11e8) 14:19:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x84400, 0x0) [ 409.331784][T15882] Sensor A: ================= START STATUS ================= [ 409.339801][T15882] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 409.346586][T15882] v4l2-ctrls: Sensor A: Vertical Flip: false [ 409.352647][T15882] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 409.359002][T15882] v4l2-ctrls: Sensor A: Brightness: 128 [ 409.364754][T15882] v4l2-ctrls: Sensor A: Contrast: 128 [ 409.370201][T15882] v4l2-ctrls: Sensor A: Hue: 0 [ 409.375197][T15882] v4l2-ctrls: Sensor A: Saturation: 128 [ 409.381163][T15882] Sensor A: ================== END STATUS ================== 14:19:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "bedf9f087e8549e5", "c1ea835047041665fc45b8d07834dd86", "6b498140", "77765d4452b1e192"}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) listen(r1, 0x0) 14:19:03 executing program 1: stat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x100) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:19:03 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="65786563203aae86ad47aa0d9495e6d80f7bde2d18ffb36caed2d408fb58e305fc8e2f2f7d08f81b621cc4214d4a24e1614fbee0beac8f4a045072b770212d46d4a2df096b791f2a4b2218e12c08ffffffffffffedeac52b5a876f73cfbe66371a72fd21e183088a1e4d9b8aec4bf11f3d9544d6b59b4a55b2abee5cbf112aa480bd4ddef272f90b8c101f8c1b5c8fe41e170fd0c775dbc5be0b6d3aeabe6028a47c64afb625ab702e5b1dc15f9c4b3d09be812f340e681e8694f5badf640da3fdfc2f929bb6a8eb9a592c577287b6022cfeec24146c7f95608bb6dde57cdefd15f25b822d2eafd2e146934b30ef1441faab2206df0d6b71b63ee08415daea19af36983578f6f4198a0843cc1b1bd78001ba5333ea5cf00223f15e2ad6f3cd1ac9e4365b7154ca203d5c3107488cb5ae19809b669a44d74e359a05590ac1ee2336490350cb41a85a86d8380ecb45e95c6cc0311eda1ae77988ab702f7d6fb74dcfb1b132aae9c480fad1cc71617b5d6d045a1146d280240e43336ff7a5c1bcddce8b14e775c87da8ff09eadce18953319afdc8382fb6e669c9f848de1b14dd8ea78d0f9560cd38a4cf5829f741a3f7d93f04dc53668324f7248af5d39d6cf7b4b88b6f536fc411788ac7b9c585ffb3e2d0670282c8b492637b10fff978c3668667d26c04839aa2e082686de41e2618be4c79f82dd61b69f01da38ea1bb5220842ac00a77b7b8405938b84652a4f758bf8a3dc4c69e33693bb6b09692212e7bf3d410eaf3b1b24f645a4ebccf7393c239485088710857f334374c38381138bdaf65ac93c768e5b1f4656105db26f5e6584f98630a02443d2fe90478e783a35848fa6b670a39a0dd0b332860474954b5f09ccd60f89f94a76a57ba714cdacfc0bcbbb9e79ec569bc2784b5769d24bdceb9aa08f945347a3ede48faa211330328d7449e9612a203e17895fada9b7a4bc4f42fb9592fb11487c34ac2d97cc904ab5b3e237a222bbd3d07e88b7232d7c31550feca067cb836d80796498f9eecfe85aec3c29b447e881ea76581ef59616af74fe91d5aa2913fe950f13df20b3a18beb489881f024ce0402c0625478e9cd601e44b8fbbc90db0c700dcca8e3a10da63a1e3479eabd97d8fdee93191bbb458a05e48232bf9fbd843e27ce2cb7aa2d2d77530690e2330e2d31117c5d75cd713b39b5d575a3309fda1e8c5d4843f243258247bc3e2d092a151b279bd7e2cb5c274b6a0e833cf7e6d1ef136a40b6ff679c9c7b72e7b173ee6e76ef58ad761e2f0"], 0xffffffcf) 14:19:03 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20001, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000500)="5c3f1f2e469233", 0x7}], 0x1) 14:19:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") sendto(r1, &(0x7f0000000000)="080000f0110000000c00a1", 0xb, 0x0, 0x0, 0x77) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="10710000000000ff004000") recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x796af2891a64a68, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r3 = dup(0xffffffffffffffff) sendfile(r3, r2, 0x0, 0x523) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') dup(r4) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) 14:19:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)) listen(r0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x200, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0xf6b, 0x0, "7aa0606dba6a35a8ecbc382d89648f6418a1b0d0cba5934918e219a3dedcbce108de9b46d276ffc1cda439c6c4a80f99dc54cabe3ad1263d6814eab213c7bd64cf2542444923c117506822016cd419bf"}, 0xd8) 14:19:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000140)="53000000c659ca80fdffffff032800000000000000bb3212eaf70d6719f68665389c21d5f8ed2fbd13000000e2ffff0000200000000049964333a3031ddca5cbc2eb56fcb9ff7daf0bdd7cfa3d4ade613a14fddcc28be605", 0xe9}], 0x2) 14:19:03 executing program 1: stat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x100) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:19:03 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000012ffc)) 14:19:03 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0020000002000000000000010076671a77bba450"], 0x20000248}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {0x77359400}, {0x2000}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b5df2697002000"}}, 0x48}}, 0x0) 14:19:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x10000, 0x8000}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r3, 0x351, 0x80, 0x71d, 0x7, 0x7ff}, &(0x7f0000000180)=0x14) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)="1dbbd1cfa84a45aec860db7088f3038d7f164548f944479b36e2b180d4d0ef1281b8abad420526436f0634436445e7917a9ad787f19cc2808cdbb689cc5ae1e36dc85457cfe79628aa90d85525c5b574e54b797ba3e02d99f216c19a02133669b91ec10c95d71909677ea095d41b3eb7d2ddfd26b5aeee9f4e6ab19f2b2c134aa77c13627650da80d1f68b72af0cab02154bb82e677fa14abceb791232745f4998ba9117ca29effb9c39223dff1e4b8647b807953acc6c7f3f98b3") listen(r0, 0x0) 14:19:04 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)='\b', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe2, 0x0, &(0x7f0000000000)) 14:19:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="32474500803da2c6f7f61dd26a117942771bf6e7114018ba92ef45e73a2daca945a5d0b9e5fa6d4796eeffbb49a4d30b3ccb2dd1ddae328d9b6f4f2e33f0bd13e725fe72286da8a6de5662a7d1ba8a407915e7f30a9560dafe489c04dbe0c1d2b9345536"], 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$media(0x0, 0x7, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() r4 = getgid() setgid(r4) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) getresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 14:19:04 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000012ffc)) 14:19:04 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0020000002000000000000010076671a77bba450"], 0x20000248}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {0x77359400}, {0x2000}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b5df2697002000"}}, 0x48}}, 0x0) 14:19:04 executing program 1: stat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x100) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:19:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) pwrite64(r1, &(0x7f0000000000)="1155304bd16137b06979", 0xa, 0x4) listen(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000080)=0xf4d, 0x4) 14:19:04 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000012ffc)) 14:19:04 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)='\b', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe2, 0x0, &(0x7f0000000000)) 14:19:04 executing program 1: r0 = socket(0x40000000001e, 0x5, 0x0) setsockopt(r0, 0x10f, 0x8000000000000081, 0xffffffffffffffff, 0x113) [ 409.694218][ T32] audit: type=1400 audit(1574086743.742:37): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name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executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0020000002000000000000010076671a77bba450"], 0x20000248}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {0x77359400}, {0x2000}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b5df2697002000"}}, 0x48}}, 0x0) 14:19:04 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000012ffc)) 14:19:04 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)='\b', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe2, 0x0, &(0x7f0000000000)) 14:19:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x2, 0x0, 0x0, 0xfffffffffffffffd}) 14:19:05 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)='\b', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe2, 0x0, &(0x7f0000000000)) 14:19:05 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0020000002000000000000010076671a77bba450"], 0x20000248}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x0, {0x77359400}, {0x77359400}, {0x2000}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b5df2697002000"}}, 0x48}}, 0x0) 14:19:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000005c0)={0x67446698, 0x0, 0x3, 0x0, 0x0, "446b9ac84f29bcfb606cd31ef0a682eafdb229c604ce9c2bfbc67951e89753a7c9742e183855563b1d9235e3bf51c7f88ea60e98c01cbad6d3b9348b7c56c7cd4bc5974db1821353cc6f1b7c0120b3eb79f4fe60ad5498a12ee3b371cfe5506731110b37d8b116920de865c1e1903660684a"}, 0x82) r0 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 14:19:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="32474500803da2c6f7f61dd26a117942771bf6e7114018ba92ef45e73a2daca945a5d0b9e5fa6d4796eeffbb49a4d30b3ccb2dd1ddae328d9b6f4f2e33f0bd13e725fe72286da8a6de5662a7d1ba8a407915e7f30a9560dafe489c04dbe0c1d2b9345536"], 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$media(0x0, 0x7, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() r4 = getgid() setgid(r4) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) getresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) [ 411.245966][T15943] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 411.387349][ C0] net_ratelimit: 22 callbacks suppressed [ 411.387472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 411.403774][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 411.485396][T15975] IPVS: ftp: loaded support on port[0] = 21 14:19:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff028}, {0x80000006}]}, 0x10) 14:19:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="32474500803da2c6f7f61dd26a117942771bf6e7114018ba92ef45e73a2daca945a5d0b9e5fa6d4796eeffbb49a4d30b3ccb2dd1ddae328d9b6f4f2e33f0bd13e725fe72286da8a6de5662a7d1ba8a407915e7f30a9560dafe489c04dbe0c1d2b9345536"], 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$media(0x0, 0x7, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() r4 = getgid() setgid(r4) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) getresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 14:19:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0xffffff1c, 0x0, 0x0, 0x0) 14:19:06 executing program 2: gettid() r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x11, &(0x7f0000000080)={0x2a, 0x40000000, 0x40001}) r6 = gettid() r7 = getpid() mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r10 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)) epoll_pwait(r10, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r7, r6, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) socket$alg(0x26, 0x5, 0x0) r11 = gettid() r12 = syz_open_procfs(r11, &(0x7f00000000c0)='\xa4\xea\vy-\xdc=4\x91\xcbF\xa3\x04\x88`\x10g\xe9\x00\x02\x06j\x951)\x04\xe9\xd1\x87\x1e\x14\xdf\x1e\xe6\x87J\xd5\xc8\xc6\xd8\xc9\xf3\x00\t\x91g\xde\xfe\x9d\x81\x15\x18z\x1bn_\xc8\x90\x85|4.pj>U\xa6\xb1\xbc>\x16\xf1\x81\xd4\xd3\x83U\xb9v\x1fI\xd1uK`\x8f\x85\xb9\x1c\xf76\x8f\xc6\xf7\x94:\xc9\xe0~Thm\xb9\xe5\x0f\xc4\am\xb2\xad\x93\x99p\xd9\xce6\xfe\xef\xcd\x8d\\\xae\xe1\xdd\x96~\xd8\x13i') listen(r12, 0x0) [ 412.287026][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 412.293345][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 412.402558][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 412.409012][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 412.415426][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 412.421570][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 412.427891][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 412.434124][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000005c0)={0x67446698, 0x0, 0x3, 0x0, 0x0, "446b9ac84f29bcfb606cd31ef0a682eafdb229c604ce9c2bfbc67951e89753a7c9742e183855563b1d9235e3bf51c7f88ea60e98c01cbad6d3b9348b7c56c7cd4bc5974db1821353cc6f1b7c0120b3eb79f4fe60ad5498a12ee3b371cfe5506731110b37d8b116920de865c1e1903660684a"}, 0x82) r0 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 14:19:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x6, &(0x7f0000000000), 0x20a154cc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 14:19:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="32474500803da2c6f7f61dd26a117942771bf6e7114018ba92ef45e73a2daca945a5d0b9e5fa6d4796eeffbb49a4d30b3ccb2dd1ddae328d9b6f4f2e33f0bd13e725fe72286da8a6de5662a7d1ba8a407915e7f30a9560dafe489c04dbe0c1d2b9345536"], 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$media(0x0, 0x7, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() r4 = getgid() setgid(r4) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) getresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 14:19:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) listen(r0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) recvfrom(r1, &(0x7f0000000000)=""/150, 0x96, 0x0, &(0x7f00000000c0)=@sco={0x1f, {0x9, 0x4, 0x1, 0x0, 0xff, 0x5}}, 0x80) 14:19:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="32474500803da2c6f7f61dd26a117942771bf6e7114018ba92ef45e73a2daca945a5d0b9e5fa6d4796eeffbb49a4d30b3ccb2dd1ddae328d9b6f4f2e33f0bd13e725fe72286da8a6de5662a7d1ba8a407915e7f30a9560dafe489c04dbe0c1d2b9345536"], 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$media(0x0, 0x7, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() r4 = getgid() setgid(r4) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) getresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 14:19:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x1}, 0x1c) [ 412.866188][T16005] IPVS: ftp: loaded support on port[0] = 21 14:19:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x6, &(0x7f0000000000), 0x20a154cc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 14:19:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="32474500803da2c6f7f61dd26a117942771bf6e7114018ba92ef45e73a2daca945a5d0b9e5fa6d4796eeffbb49a4d30b3ccb2dd1ddae328d9b6f4f2e33f0bd13e725fe72286da8a6de5662a7d1ba8a407915e7f30a9560dafe489c04dbe0c1d2b9345536"], 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$media(0x0, 0x7, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() r4 = getgid() setgid(r4) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) getresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 14:19:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}, @IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x40}}, 0x0) 14:19:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x6, &(0x7f0000000000), 0x20a154cc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 14:19:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="32474500803da2c6f7f61dd26a117942771bf6e7114018ba92ef45e73a2daca945a5d0b9e5fa6d4796eeffbb49a4d30b3ccb2dd1ddae328d9b6f4f2e33f0bd13e725fe72286da8a6de5662a7d1ba8a407915e7f30a9560dafe489c04dbe0c1d2b9345536"], 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$media(0x0, 0x7, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() r4 = getgid() setgid(r4) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) getresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 14:19:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 14:19:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000680)=ANY=[@ANYBLOB="00465ff63f0608a8b753560ba8282a000000000000000100026ab196a3dc8c3b00000000000000000000000000000900000000000000010400000000000000006a92f20ce338cbf05c2f85e4280ea8dd072eed51d82d8e609fab8ef9b0c9e14f4f36f029108a0de478a80e2f55ad5445c1eae5704d9d087f8297cc6e6cdee1238138f6be6a1b27bc95651b2b619018646da30ead1a33c2bfb51f3451375aa42857e11737de403f2f83d376064fc997660aebff5139f74f32ff25cbd21d40d80813a989e2225bbdacbac7e1ef384acb5194fac7c3dcc4df79d78f6c0bda6e32b9c6c41b5bafa49360432671a88e4fa496b91a87edbfae24be3cd21121fdfd994ef0311f1de7e63ffd0affafdf9160141f022c3cbcd47988095c48af6f9ae716c8ebafa206343029797d5dc23c7f4bd174840621ccf247b6e7569d4a4eb9293a12e16c29c183f136186d09d0a0489d2139dc0328f259b224bd56d1b96aefbd82d414294638d842f4a286c1db0547b1db58e1088eac49fa0d07f3315078fb694c0df2c3a9106ae6faf25b4cdc00baec3a0b844604f00080541f067f2b3937e731445e42c6b12494a084f6a2ab6c467512f0082bc9d53e590350ddd8"]) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000005c0)={0x67446698, 0x0, 0x3, 0x0, 0x0, "446b9ac84f29bcfb606cd31ef0a682eafdb229c604ce9c2bfbc67951e89753a7c9742e183855563b1d9235e3bf51c7f88ea60e98c01cbad6d3b9348b7c56c7cd4bc5974db1821353cc6f1b7c0120b3eb79f4fe60ad5498a12ee3b371cfe5506731110b37d8b116920de865c1e1903660684a"}, 0x82) r0 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 14:19:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 14:19:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x6, &(0x7f0000000000), 0x20a154cc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) [ 414.805072][T16046] IPVS: ftp: loaded support on port[0] = 21 14:19:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 14:19:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000005c0)={0x67446698, 0x0, 0x3, 0x0, 0x0, "446b9ac84f29bcfb606cd31ef0a682eafdb229c604ce9c2bfbc67951e89753a7c9742e183855563b1d9235e3bf51c7f88ea60e98c01cbad6d3b9348b7c56c7cd4bc5974db1821353cc6f1b7c0120b3eb79f4fe60ad5498a12ee3b371cfe5506731110b37d8b116920de865c1e1903660684a"}, 0x82) r0 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 14:19:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 14:19:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) [ 415.972563][T16067] IPVS: ftp: loaded support on port[0] = 21 14:19:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 14:19:10 executing program 0: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) 14:19:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 14:19:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_dump}) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 14:19:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 14:19:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) [ 416.858243][ C1] net_ratelimit: 16 callbacks suppressed [ 416.858264][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 416.870432][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 416.876784][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 416.883224][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 416.889498][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 416.896005][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 416.902439][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 416.908675][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 416.915321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 416.921462][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r2, 0xff, 0x1, 0x0, 0x288) 14:19:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 14:19:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 14:19:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x8c, 0x24040040, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 14:19:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') r0 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000140)='fd\x00') lstat(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() setgid(r3) getgroups(0x2, &(0x7f0000000040)=[0x0, 0xffffffffffffffff]) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, 0x0) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000140)='fd\x00') getpgid(r5) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, 0x0) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"}) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') openat(r10, &(0x7f0000000780)='./file0\x00', 0x2, 0x1) pipe2(&(0x7f00000007c0), 0x44000) r11 = gettid() syz_open_procfs(r11, &(0x7f0000000140)='fd\x00') r12 = getgid() setgid(r12) getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) sendmsg$unix(r0, 0x0, 0xfd1c492160ddf9bd) r13 = socket(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) setresuid(r2, 0x0, r14) 14:19:12 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3016}) 14:19:12 executing program 5: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000240)="db40951195b653295096266990", 0xd) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000140)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r0}, 0x0, 0x0, 0x0) 14:19:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x20, 0x0, 0x7, {[@noop, @timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [{[@loopback]}]}]}}}], 0x20}, 0x0) 14:19:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYRESHEX]], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:12 executing program 3: unshare(0x26020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4a) 14:19:12 executing program 5: prctl$PR_SET_NAME(0xf, 0xfffffffffffffffe) 14:19:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev}]}}}]}, 0x48}}, 0x0) 14:19:12 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) 14:19:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x8c, 0x24040040, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 14:19:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x62, &(0x7f0000000400)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x2c, 0x0, 0x0, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@hopopts={0x0, 0x2, [], [@ra, @pad1, @padn={0x1, 0x0, [0x0]}, @jumbo]}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 14:19:12 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0xfede}], 0x1, 0x81000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000011, r2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write(r0, &(0x7f0000000000), 0x52698b21) 14:19:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x400032, 0xffffffffffffffff, 0x0) 14:19:13 executing program 5: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40800000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 14:19:13 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x4012032, 0xffffffffffffffff, 0x0) 14:19:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x34}}, 0x0) 14:19:13 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 'syz1\x00', &(0x7f0000000080)=['/dev/loop#\x00', 'bdeveth1eth0-}@nodev*\x00', 'lo-#vmnet0trusted\'\x00', '/dev/dlm-control\x00'], 0x45}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)="e26fa401def77da2", 0x8}], 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x5, @empty, 0xfffffffa}, {0xa, 0x4e23, 0x1, @mcast1, 0x3}, 0xffffffffffffffff, 0x8001}}, 0x48) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x2, 0x6, 0x514, 0x4, 'syz0\x00', 0x3f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1, 0x1}, 0x3c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) getpeername(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0xd) dup3(r2, r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000200)}, 0x20) 14:19:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x20000021011, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000078000/0x3000)=nil], 0x0, &(0x7f0000000180), 0x0) 14:19:13 executing program 5: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40800000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 14:19:13 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 14:19:13 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x40047452, 0xffffffffffffffff) 14:19:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x8c, 0x24040040, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 14:19:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e") add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xce, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000000c0)={'idz'}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/207, 0xffffffffffffff21) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'s}z', 0x0}, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008900), 0x400000000000206, 0x0) 14:19:14 executing program 5: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40800000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 14:19:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x40047452, 0xffffffffffffffff) [ 420.186141][ C0] sd 0:0:1:0: [sg0] tag#1217 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 420.196205][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB: Test Unit Ready [ 420.202836][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.212706][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.222610][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.232431][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.242344][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.252227][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.262065][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.268040][ C1] sd 0:0:1:0: [sg0] tag#1218 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 420.271877][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.281571][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB: Test Unit Ready [ 420.291213][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.297919][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.307558][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.307652][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.317453][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.327048][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.336721][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.346363][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.356231][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.365894][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.375542][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.385478][ C0] sd 0:0:1:0: [sg0] tag#1217 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.395188][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.423800][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.433656][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.443574][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.453390][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.463358][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.473205][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:14 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 420.483055][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.492797][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.503005][ C1] sd 0:0:1:0: [sg0] tag#1218 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:14 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x40047452, 0xffffffffffffffff) 14:19:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e") add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xce, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000000c0)={'idz'}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/207, 0xffffffffffffff21) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'s}z', 0x0}, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008900), 0x400000000000206, 0x0) [ 420.860764][ C1] sd 0:0:1:0: [sg0] tag#1219 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 420.870480][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB: Test Unit Ready [ 420.877353][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.887363][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.897774][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.907687][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.917550][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.927480][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.937603][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.947583][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.957447][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.967281][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.977111][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.986956][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.996801][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:15 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x40047452, 0xffffffffffffffff) [ 421.006650][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.017607][ C1] sd 0:0:1:0: [sg0] tag#1219 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e") add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xce, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000000c0)={'idz'}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/207, 0xffffffffffffff21) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'s}z', 0x0}, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008900), 0x400000000000206, 0x0) [ 421.413367][ C0] sd 0:0:1:0: [sg0] tag#1220 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 421.423221][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB: Test Unit Ready [ 421.430060][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.439966][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.449980][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.459946][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.470154][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.479972][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.489836][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.499674][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.509495][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.519312][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.529162][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.538969][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.548827][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x8c, 0x24040040, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 14:19:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x2c, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28804) [ 421.558659][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.568599][ C0] sd 0:0:1:0: [sg0] tag#1220 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e") add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xce, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000000c0)={'idz'}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/207, 0xffffffffffffff21) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'s}z', 0x0}, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008900), 0x400000000000206, 0x0) [ 421.811856][ C0] sd 0:0:1:0: [sg0] tag#1221 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 421.821576][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB: Test Unit Ready [ 421.828323][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.838140][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.847957][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.857818][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.867727][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.877855][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.887729][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.897538][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.907352][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.917170][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.926978][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.936806][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.946605][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e") add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xce, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000000c0)={'idz'}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/207, 0xffffffffffffff21) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'s}z', 0x0}, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008900), 0x400000000000206, 0x0) 14:19:16 executing program 5: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40800000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 421.956392][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.966283][ C0] sd 0:0:1:0: [sg0] tag#1221 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) [ 422.172922][ C1] sd 0:0:1:0: [sg0] tag#1222 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 422.183864][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB: Test Unit Ready [ 422.190488][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.200461][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.210307][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.220240][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.230097][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.240142][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.249995][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.259882][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.269801][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.279744][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.289576][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.299428][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.309642][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.319494][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.329331][ C1] sd 0:0:1:0: [sg0] tag#1222 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) 14:19:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) [ 423.223266][ C1] net_ratelimit: 26 callbacks suppressed [ 423.223288][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.235695][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) [ 423.303442][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.309658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 423.316115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.322240][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 423.328600][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.334740][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 423.341060][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.347377][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0x0) 14:19:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) 14:19:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e") add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xce, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000000c0)={'idz'}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/207, 0xffffffffffffff21) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'s}z', 0x0}, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008900), 0x400000000000206, 0x0) 14:19:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e") add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xce, 0x0}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000000c0)={'idz'}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/207, 0xffffffffffffff21) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'s}z', 0x0}, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008900), 0x400000000000206, 0x0) [ 423.692498][ C1] sd 0:0:1:0: [sg0] tag#1223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 423.702364][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB: Test Unit Ready [ 423.709110][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.719169][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.729007][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.738850][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.748689][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.758759][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.768599][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.778622][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.788476][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.798305][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.808142][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.817999][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.827927][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:17 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000140)='fd\x00') exit(0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 423.838027][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 423.847918][ C1] sd 0:0:1:0: [sg0] tag#1223 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.658911][ C1] sd 0:0:1:0: [sg0] tag#1224 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 424.668634][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB: Test Unit Ready [ 424.675356][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.685533][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.695504][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.705850][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.715774][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.725638][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.735526][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.745364][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.755202][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.765043][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.775024][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.784858][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.795543][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.805369][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 424.815295][ C1] sd 0:0:1:0: [sg0] tag#1224 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000001580), 0xa5) 14:19:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_RUN(r4, 0x8004ae98, 0x71a000) 14:19:20 executing program 4: clone(0x29238d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:19:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000100)={@local, @local}, 0x3) 14:19:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x6) 14:19:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'dummy0\x00', @ifru_data=0x0}) 14:19:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff401870cc, &(0x7f0000000040)) 14:19:20 executing program 2: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r2, 0x0, 0x2c, &(0x7f0000000040)='(^vboxnet1^eth0!securityvboxnet1GPLsecurity\x00', 0xffffffffffffffff}, 0x30) r3 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r3) r4 = fcntl$getown(r3, 0x9) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='\x13ounts\x00') listen(r5, 0x0) 14:19:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x6) 14:19:20 executing program 3: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3, 0x1c) 14:19:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 14:19:20 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000240)=@req3={0xfff, 0x0, 0x0, 0xfff}, 0x1c) sendmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000005ac0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1}}, 0x80, 0x0}}], 0x2, 0x0) 14:19:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0xa3, 0x4, 0x100000001, 0x105, r0}, 0x3c) 14:19:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x6) 14:19:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x03z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0xa}}) 14:19:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x6) 14:19:20 executing program 3: unshare(0x400) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, 0x0) 14:19:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e005f0014f9f407000904000700000001000000000000000800010000000000", 0x24) 14:19:21 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:19:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x58, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x70b8737c5c566a3d, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@mp_fclose={0x1e, 0xc}, @window={0x2, 0x3}, @md5sig={0x13, 0x12, "d31c8190da8dfe461d135b075be2c1c4"}, @md5sig={0x13, 0x12, "5b3bffffdf7f0000000047a621547516"}, @exp_fastopen={0xfe, 0x8, 0xf989, "908fabfe"}]}}}}}}}}, 0x0) 14:19:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x7b}) 14:19:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x6, 0xc6b4}, {0x5, 0x3}]}, 0x14, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002740)}, 0x49bf}, {{&(0x7f0000002780)=@ethernet={0x0, @link_local}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002ac0)=""/250, 0xfa}, {&(0x7f0000002bc0)=""/33, 0x21}], 0x3}}, {{&(0x7f0000002d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000003080)=[{0x0}, {&(0x7f0000002dc0)=""/235, 0xeb}, {&(0x7f0000002ec0)=""/13, 0xd}, {&(0x7f0000002f00)=""/199, 0xc7}], 0x4}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000003180)=""/227, 0xe3}, {&(0x7f0000003280)=""/117, 0x75}, {0x0}, {&(0x7f0000004300)=""/207, 0xcf}, {0x0}], 0x5, &(0x7f00000044c0)}}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005a40)=""/89, 0x59}, {&(0x7f0000005ac0)=""/223, 0xdf}, {&(0x7f0000005bc0)=""/245, 0xf5}, {&(0x7f0000005cc0)=""/128, 0x80}, {&(0x7f0000005d40)=""/170, 0xaa}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f00000060c0)=""/230, 0xe6}, 0x9}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/202, 0xca}, {&(0x7f00000062c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000007380)=""/127, 0x7f}, {&(0x7f0000007440)=""/128, 0x80}, {&(0x7f00000074c0)=""/184, 0xb8}, {&(0x7f0000007580)=""/89, 0x59}, {0x0}], 0x8}, 0x4}, {{0x0, 0x0, &(0x7f0000007a00)=[{0x0}, {&(0x7f0000007980)=""/81, 0x51}], 0x2, &(0x7f0000007a40)=""/132, 0x84}, 0x2}], 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 14:19:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) [ 427.350016][T16368] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:19:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x60}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) 14:19:21 executing program 3: unshare(0x400) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) 14:19:21 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) 14:19:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2712, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0x100ea) 14:19:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x10}}) 14:19:21 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000100)='F', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 14:19:21 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) 14:19:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 14:19:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2712, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0x100ea) 14:19:22 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 14:19:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x6, 0xc6b4}, {0x5, 0x3}]}, 0x14, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002740)}, 0x49bf}, {{&(0x7f0000002780)=@ethernet={0x0, @link_local}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002ac0)=""/250, 0xfa}, {&(0x7f0000002bc0)=""/33, 0x21}], 0x3}}, {{&(0x7f0000002d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000003080)=[{0x0}, {&(0x7f0000002dc0)=""/235, 0xeb}, {&(0x7f0000002ec0)=""/13, 0xd}, {&(0x7f0000002f00)=""/199, 0xc7}], 0x4}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000003180)=""/227, 0xe3}, {&(0x7f0000003280)=""/117, 0x75}, {0x0}, {&(0x7f0000004300)=""/207, 0xcf}, {0x0}], 0x5, &(0x7f00000044c0)}}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005a40)=""/89, 0x59}, {&(0x7f0000005ac0)=""/223, 0xdf}, {&(0x7f0000005bc0)=""/245, 0xf5}, {&(0x7f0000005cc0)=""/128, 0x80}, {&(0x7f0000005d40)=""/170, 0xaa}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f00000060c0)=""/230, 0xe6}, 0x9}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/202, 0xca}, {&(0x7f00000062c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000007380)=""/127, 0x7f}, {&(0x7f0000007440)=""/128, 0x80}, {&(0x7f00000074c0)=""/184, 0xb8}, {&(0x7f0000007580)=""/89, 0x59}, {0x0}], 0x8}, 0x4}, {{0x0, 0x0, &(0x7f0000007a00)=[{0x0}, {&(0x7f0000007980)=""/81, 0x51}], 0x2, &(0x7f0000007a40)=""/132, 0x84}, 0x2}], 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 14:19:22 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000100)='F', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 14:19:22 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 14:19:22 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) 14:19:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2712, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0x100ea) 14:19:22 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 14:19:22 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) 14:19:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2712, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0x100ea) 14:19:22 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 14:19:22 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000100)='F', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 14:19:23 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 14:19:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e0180000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379c7ec6e26565780000000000000000000765c7e5293f81a76"], 0x58) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(0x0, 0x0, 0x1) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0xfd79}, 0xff8a) [ 429.301064][ C0] sd 0:0:1:0: [sg0] tag#1245 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 429.310812][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB: Test Unit Ready [ 429.317517][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.327316][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.337174][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.347051][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.356984][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.366806][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.376666][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.386475][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.396295][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.406293][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.416446][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.427491][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.437958][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.449404][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.459223][ C0] sd 0:0:1:0: [sg0] tag#1245 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.463463][ C1] net_ratelimit: 26 callbacks suppressed [ 429.463483][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.480044][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 429.543364][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.549580][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 429.556149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.562384][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 429.568881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.575220][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 429.581748][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.588069][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x6, 0xc6b4}, {0x5, 0x3}]}, 0x14, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002740)}, 0x49bf}, {{&(0x7f0000002780)=@ethernet={0x0, @link_local}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002ac0)=""/250, 0xfa}, {&(0x7f0000002bc0)=""/33, 0x21}], 0x3}}, {{&(0x7f0000002d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000003080)=[{0x0}, {&(0x7f0000002dc0)=""/235, 0xeb}, {&(0x7f0000002ec0)=""/13, 0xd}, {&(0x7f0000002f00)=""/199, 0xc7}], 0x4}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000003180)=""/227, 0xe3}, {&(0x7f0000003280)=""/117, 0x75}, {0x0}, {&(0x7f0000004300)=""/207, 0xcf}, {0x0}], 0x5, &(0x7f00000044c0)}}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005a40)=""/89, 0x59}, {&(0x7f0000005ac0)=""/223, 0xdf}, {&(0x7f0000005bc0)=""/245, 0xf5}, {&(0x7f0000005cc0)=""/128, 0x80}, {&(0x7f0000005d40)=""/170, 0xaa}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f00000060c0)=""/230, 0xe6}, 0x9}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/202, 0xca}, {&(0x7f00000062c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000007380)=""/127, 0x7f}, {&(0x7f0000007440)=""/128, 0x80}, {&(0x7f00000074c0)=""/184, 0xb8}, {&(0x7f0000007580)=""/89, 0x59}, {0x0}], 0x8}, 0x4}, {{0x0, 0x0, &(0x7f0000007a00)=[{0x0}, {&(0x7f0000007980)=""/81, 0x51}], 0x2, &(0x7f0000007a40)=""/132, 0x84}, 0x2}], 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 14:19:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) add_key(&(0x7f00000005c0)='rxrpc_s\x00', 0x0, &(0x7f0000000640)="5942f4b7af71ba73", 0x8, r0) 14:19:23 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000100)='F', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 14:19:23 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x2, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) 14:19:23 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 14:19:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e0180000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379c7ec6e26565780000000000000000000765c7e5293f81a76"], 0x58) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(0x0, 0x0, 0x1) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0xfd79}, 0xff8a) [ 429.767891][ C0] sd 0:0:1:0: [sg0] tag#1247 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 429.777934][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB: Test Unit Ready [ 429.784752][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.794542][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.804425][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.814248][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.824090][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.833900][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.843763][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.853654][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.863472][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.873420][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.883399][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.893451][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.904330][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e0180000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379c7ec6e26565780000000000000000000765c7e5293f81a76"], 0x58) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(0x0, 0x0, 0x1) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0xfd79}, 0xff8a) [ 429.914151][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 429.924018][ C0] sd 0:0:1:0: [sg0] tag#1247 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e0180000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379c7ec6e26565780000000000000000000765c7e5293f81a76"], 0x58) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(0x0, 0x0, 0x1) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0xfd79}, 0xff8a) 14:19:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000710fe4)={0xa, 0x4e21}, 0x1c) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r2, &(0x7f00007af000)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) [ 430.204545][ C1] sd 0:0:1:0: [sg0] tag#1250 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 430.214686][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB: Test Unit Ready [ 430.221392][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.231325][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.241241][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.251063][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.260893][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.270871][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.280673][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.290451][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.300323][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.310100][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.320039][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.329834][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.339648][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e0180000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379c7ec6e26565780000000000000000000765c7e5293f81a76"], 0x58) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(0x0, 0x0, 0x1) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0xfd79}, 0xff8a) [ 430.349507][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.359314][ C1] sd 0:0:1:0: [sg0] tag#1250 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.482771][ C0] sd 0:0:1:0: [sg0] tag#1248 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 430.492599][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB: Test Unit Ready [ 430.499560][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.509494][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.519364][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.529179][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.539054][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.548869][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.558715][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.568657][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.578702][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.588702][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.598537][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.608342][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.618243][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e0180000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379c7ec6e26565780000000000000000000765c7e5293f81a76"], 0x58) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(0x0, 0x0, 0x1) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0xfd79}, 0xff8a) 14:19:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000280)=0x58, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 430.628222][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.638423][ C0] sd 0:0:1:0: [sg0] tag#1248 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.640136][ C1] sd 0:0:1:0: [sg0] tag#1251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 430.657089][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB: Test Unit Ready [ 430.663805][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.673653][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.683503][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.693573][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.703920][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.713961][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.724021][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.733886][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.743714][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.753543][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.763457][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.773472][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.783296][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.793102][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.802948][ C1] sd 0:0:1:0: [sg0] tag#1251 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.856703][ C1] sd 0:0:1:0: [sg0] tag#1253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 430.866544][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB: Test Unit Ready [ 430.874304][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.884268][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.894088][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.903909][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.913934][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.923927][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.933766][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.943704][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x6, 0xc6b4}, {0x5, 0x3}]}, 0x14, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002740)}, 0x49bf}, {{&(0x7f0000002780)=@ethernet={0x0, @link_local}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002ac0)=""/250, 0xfa}, {&(0x7f0000002bc0)=""/33, 0x21}], 0x3}}, {{&(0x7f0000002d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000003080)=[{0x0}, {&(0x7f0000002dc0)=""/235, 0xeb}, {&(0x7f0000002ec0)=""/13, 0xd}, {&(0x7f0000002f00)=""/199, 0xc7}], 0x4}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000003180)=""/227, 0xe3}, {&(0x7f0000003280)=""/117, 0x75}, {0x0}, {&(0x7f0000004300)=""/207, 0xcf}, {0x0}], 0x5, &(0x7f00000044c0)}}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005a40)=""/89, 0x59}, {&(0x7f0000005ac0)=""/223, 0xdf}, {&(0x7f0000005bc0)=""/245, 0xf5}, {&(0x7f0000005cc0)=""/128, 0x80}, {&(0x7f0000005d40)=""/170, 0xaa}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f00000060c0)=""/230, 0xe6}, 0x9}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/202, 0xca}, {&(0x7f00000062c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000007380)=""/127, 0x7f}, {&(0x7f0000007440)=""/128, 0x80}, {&(0x7f00000074c0)=""/184, 0xb8}, {&(0x7f0000007580)=""/89, 0x59}, {0x0}], 0x8}, 0x4}, {{0x0, 0x0, &(0x7f0000007a00)=[{0x0}, {&(0x7f0000007980)=""/81, 0x51}], 0x2, &(0x7f0000007a40)=""/132, 0x84}, 0x2}], 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 14:19:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000631104010000000095000000000000006876350c5878697c2c3331a2bbbc9358efa77bc156c63f0717179943204646bbe1b3af5aa3846092a6331d791596fad6a4a46dfd8a23fda4dc45e5d1dd0da6bf92cffefad12995fc43ed0a42736b67cfbe6e47c290cd776f4bd9e1f9d0d66ded3e1a84525091e232d16a0a3350ad490a3b35dc62b0d1515816017a1439971aae471b606340a9b34a22f563d8d5a37709efaa90f743feac97567ffe63846de43d938648787c2b737e303fce610f4df947bce17b69309142f8677d0fb31272dc4c443b394b65aba9e82578814e107db0d7abd0f63f42b2e1b08c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:19:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e0180000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379c7ec6e26565780000000000000000000765c7e5293f81a76"], 0x58) add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(0x0, 0x0, 0x1) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0xfd79}, 0xff8a) 14:19:25 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 430.954150][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.963987][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.973807][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.983739][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 430.993566][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:25 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 431.003996][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.013823][ C1] sd 0:0:1:0: [sg0] tag#1253 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.086733][ C0] sd 0:0:1:0: [sg0] tag#1254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 431.096499][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB: Test Unit Ready [ 431.103231][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.113144][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.123011][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.133050][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.142833][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.152794][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.162863][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.172743][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.182757][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.192746][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.202984][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.212751][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.222627][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:25 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 431.232449][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 431.242246][ C0] sd 0:0:1:0: [sg0] tag#1254 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:25 executing program 4: ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {0x0, 0xff}]}) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='loginuid\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='0', 0x1}], 0x276) 14:19:25 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 14:19:25 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x10270) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x5, 0x0, "9779cc07bb9496b900a1f0979b3dfcf03db2ee5f4f0600000000000000996eb5e5967cd5ee5e84643f35cd92487347b7d2aee5fd930cb96a5211115703e75400"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 14:19:25 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 14:19:25 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 14:19:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) 14:19:26 executing program 4: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @rand_addr="0f16c9ad6b53178f931d0d02cc2c1bd5"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}, 0x5c) r0 = socket$inet6(0xa, 0x200000000000001, 0x0) setsockopt$inet_buf(r0, 0x0, 0x100000040, &(0x7f0000000040), 0x0) 14:19:26 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 14:19:26 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) ppoll(&(0x7f0000000540)=[{r1}, {r2, 0x1011}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 14:19:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000240)=""/244, 0xf4) 14:19:26 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'batadv0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfbfffffffffffffc, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) dup2(r3, r4) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x0, @local, 'ip_vti0\x00'}}, 0x1e) 14:19:26 executing program 3: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) 14:19:26 executing program 4: r0 = epoll_create1(0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000180)) close(r1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 14:19:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a60000000a8430891ed0000390009000a000c00060000001900a30700000000000000dc1338d54400009b841338caaee86ef75afba3de448daa7227c43ab8220000060c00", 0x55}], 0x1}, 0x0) 14:19:26 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x10270) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x5, 0x0, "9779cc07bb9496b900a1f0979b3dfcf03db2ee5f4f0600000000000000996eb5e5967cd5ee5e84643f35cd92487347b7d2aee5fd930cb96a5211115703e75400"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 14:19:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe07000000e3000000ff3f01000000450001070000001419001a000400020007000a00550e69330f4de5020080080000", 0x39}], 0x1) 14:19:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 14:19:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='net\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 14:19:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)=ANY=[@ANYRESHEX], 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x24, 0x0, &(0x7f0000000000)) 14:19:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000180)="0503000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c", 0x4a, 0x0, 0x0, 0x0) [ 432.674759][T16597] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 432.700282][T16601] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 14:19:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7e}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 14:19:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet6_mreq(r3, 0x29, 0x6, 0x0, 0x0) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 14:19:26 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc2, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 14:19:27 executing program 1: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b1", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt(r1, 0xff, 0x0, 0x0, &(0x7f0000000040)) 14:19:27 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x5, 0x1f3}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000001480)=""/25, 0x19}], 0x1) 14:19:27 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc2, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 14:19:27 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x10270) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x5, 0x0, "9779cc07bb9496b900a1f0979b3dfcf03db2ee5f4f0600000000000000996eb5e5967cd5ee5e84643f35cd92487347b7d2aee5fd930cb96a5211115703e75400"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 14:19:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "fd0033", 0x10, 0x2f, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x8035, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96e266", 0x0, "fe3f00"}}}}}}}, 0x0) 14:19:27 executing program 1: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b1", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt(r1, 0xff, 0x0, 0x0, &(0x7f0000000040)) 14:19:27 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x5, 0x1f3}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000001480)=""/25, 0x19}], 0x1) 14:19:27 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc2, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 14:19:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000180)={'team_slave_1\x00', @ifru_data=&(0x7f0000000080)="73b772c840027f0bb74ec4d1de9fbbc18f8dd38244ec6af883fccc101fbe25d1"}) 14:19:27 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x5, 0x1f3}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000001480)=""/25, 0x19}], 0x1) 14:19:27 executing program 1: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b1", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt(r1, 0xff, 0x0, 0x0, &(0x7f0000000040)) 14:19:27 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc2, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 14:19:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "fd0033", 0x10, 0x2f, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x8035, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96e266", 0x0, "fe3f00"}}}}}}}, 0x0) 14:19:27 executing program 4: syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 14:19:28 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x5, 0x1f3}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000001480)=""/25, 0x19}], 0x1) [ 433.914586][T16663] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 433.923237][T16663] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 434.020868][T16671] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 434.032524][T16671] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) 14:19:28 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x10270) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x5, 0x0, "9779cc07bb9496b900a1f0979b3dfcf03db2ee5f4f0600000000000000996eb5e5967cd5ee5e84643f35cd92487347b7d2aee5fd930cb96a5211115703e75400"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 14:19:28 executing program 1: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b1", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt(r1, 0xff, 0x0, 0x0, &(0x7f0000000040)) 14:19:28 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0xd, 0x0, 0x10000}}) ioctl$RTC_AIE_OFF(r0, 0x7002) 14:19:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "fd0033", 0x10, 0x2f, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x8035, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96e266", 0x0, "fe3f00"}}}}}}}, 0x0) 14:19:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99>oJ\x02u\x9b\x94a\xac\x00\x00\x00', 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0], 0x4) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x0, 0x0, 0x9) dup3(r0, r1, 0x0) 14:19:28 executing program 0: setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)={0x2c, @multicast1, 0x0, 0x0, 'sed\x00'}, 0x2c) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0x10109) 14:19:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x40a5b9114a01e145}, 0x1c}}, 0x0) [ 434.558558][T16688] rtc_cmos 00:00: Alarms can be up to one day in the future [ 434.583634][ C0] net_ratelimit: 24 callbacks suppressed [ 434.583664][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.596303][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:19:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "fd0033", 0x10, 0x2f, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x8035, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96e266", 0x0, "fe3f00"}}}}}}}, 0x0) 14:19:28 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0xd, 0x0, 0x10000}}) ioctl$RTC_AIE_OFF(r0, 0x7002) 14:19:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) 14:19:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x40a5b9114a01e145}, 0x1c}}, 0x0) 14:19:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x14, &(0x7f0000000100), 0x4) [ 435.156304][T16717] sctp: [Deprecated]: syz-executor.3 (pid 16717) Use of int in max_burst socket option deprecated. [ 435.156304][T16717] Use struct sctp_assoc_value instead 14:19:29 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x634b, 0x0, 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:19:29 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0xd, 0x0, 0x10000}}) ioctl$RTC_AIE_OFF(r0, 0x7002) 14:19:29 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"ef36ba0e1ab80302fa68cf4a13f38890"}}}}, 0xa0) 14:19:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) close(r2) splice(r2, &(0x7f0000000000)=0x17, r0, &(0x7f0000000040), 0x9, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00007a7000)='./control\x00', 0xa4000960) close(r4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes128, 0x2, [], "e9d593706256d3057ac5b7be75410b24"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x170}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000680)=0x1f2) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 14:19:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x40a5b9114a01e145}, 0x1c}}, 0x0) 14:19:29 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40045402, 0x0) 14:19:29 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0xd, 0x0, 0x10000}}) ioctl$RTC_AIE_OFF(r0, 0x7002) 14:19:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x80000000, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000340)={0xd, @output}) 14:19:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x40a5b9114a01e145}, 0x1c}}, 0x0) 14:19:29 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x5, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x80, 0x0}}], 0x2, 0x0) 14:19:29 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) [ 435.703473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 435.709799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 435.783427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 435.790822][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 435.797341][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 435.803682][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 435.810181][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 435.816819][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010069706970000000000c37bf752d3e01e775c5f838e239d39886648a0b4989b15c000001"], 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) [ 436.018317][T16763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x634b, 0x0, 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:19:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403175dd106776d17c3298a76d699010000001379000025da3f00000000265657800000000000000000007613e987d2f81a76e5cb8b66c2277b09c1453b21ba1cbb4547ef5faa8d1db9445dc8b767238e5d934b812ab4c9d67fe86d00000000000000e39a16ea964d725a246da5d12f4bcabdf2e27c0deb073e5e285ef69991dc6b1755fd740e60ee550e523d0723264fabcc4572254fc5c867aad0f4"], 0xbf) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xfffffffffffffea2, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x2000c091) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r2, &(0x7f0000000000)=""/37, 0x25) getdents(r2, &(0x7f0000000040)=""/123, 0x7b) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="86465a0f0d58560fc7ad69000000f30fc7330f320f01fcb9800000c00f3235010000000f3026670f229e660f090500900000", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ptrace$pokeuser(0x6, 0x0, 0x4, 0x100000000) socket(0x1, 0x800, 0x0) 14:19:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0xc6) 14:19:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000206053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0) 14:19:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000000)) 14:19:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000900)={&(0x7f0000000780), 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0x118, r1, 0x15, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0xfffffff9}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x118}}, 0x0) 14:19:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000180)=""/55, 0x37) 14:19:30 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fadvise64(r0, 0x0, 0x80000001, 0x4) [ 436.437594][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 436.487712][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 14:19:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x28, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0xffff}, @IFLA_GRE_ERSPAN_DIR={0x8}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}], @gre_common_policy=[@IFLA_GRE_OKEY={0x8}]]}}}]}, 0x5c}}, 0x0) 14:19:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@timestamp={0x44, 0x318}]}}, @icmp=@echo}}}}, 0x0) 14:19:30 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x73) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@flowinfo={{0x14, 0x29, 0xb, 0x800}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffa}}], 0x30}}], 0x2, 0x0) [ 436.763431][T16798] netlink: 'syz-executor.0': attribute type 24 has an invalid length. [ 436.771890][T16798] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 436.780316][T16798] netlink: 'syz-executor.0': attribute type 22 has an invalid length. 14:19:31 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x634b, 0x0, 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:19:31 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x0, 0x0, @ipv4={[0xfc], [], @broadcast}, @local, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffff0a000000}}}}}}}, 0x0) 14:19:31 executing program 2: syz_emit_ethernet(0x4f, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x19, 0x40000000003a, 0x43ff, @rand_addr="7c75cb47ad0e73292a4ec8119fcd69de", @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @remote, [{0x0, 0x0, "698390"}]}}}}}}, 0x0) 14:19:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x0, 0x0, 0xfffffffd}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x7, 0x0, 0x9}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x9}) 14:19:31 executing program 1: stat(&(0x7f0000000980)='./file0/file0\x00', 0x0) getegid() socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x0, 0x800, "45ad574dc7ff377062dfb9e5d4e504c3e2522c840c42b7c1", {0x3, 0x3}, 0x401}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000001, 0x0, 0x0, 0x8, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x801, 0x84) unshare(0x60020000) 14:19:31 executing program 0: r0 = memfd_create(&(0x7f0000000080)='keyring[)mime_typewlan1-selinuxvboxnet0$nodeveth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000a0cff4)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) getsockopt$netlink(r3, 0x10e, 0x8000000009, &(0x7f00007e0000)=""/4, &(0x7f0000000000)=0xfead) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000a0cff4)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) getsockopt$netlink(r4, 0x10e, 0x8000000009, &(0x7f00007e0000)=""/4, &(0x7f0000000000)=0xfead) [ 437.279826][T16810] IPVS: ftp: loaded support on port[0] = 21 14:19:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14:19:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="2400000020007be11dfffd946f610500020000061f00008100000800080017000400ff7e280000001100ffffba16a0aa1c0900000000000020000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 14:19:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="c5e3a8d2bb157662c9ce24196aead228b5102d7b416222eb803b141605e2734006a703f724461cebf8228e34203b810343859992a79c45dfbfe957826d705fdb652c11c280459988b65423a38c9c8f5fb05bf8b46fd4d55f8f6030392c22c955a5861452d37d", 0x66}, {&(0x7f00000002c0)="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", 0x8e8}], 0x2, &(0x7f0000004740)=[@dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x18}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, [], [@ra, @pad1, @enc_lim, @pad1]}}}], 0x68}}, {{&(0x7f00000013c0)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000002800)=[{0x0, 0x1b8}, {&(0x7f0000002680)}], 0x2, &(0x7f0000002880)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x0, 0x0, 0x0, [@remote, @empty]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x0, 0x4, [], [@hao={0xc9, 0x10, @loopback}, @generic, @hao={0xc9, 0x10, @empty}]}}}], 0x78}}], 0x2, 0xabec4d8729deb1ef) 14:19:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 14:19:31 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x634b, 0x0, 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 437.778005][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}}, 0x0) 14:19:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000002d80)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1, 0x0) [ 438.082086][T16819] IPVS: ftp: loaded support on port[0] = 21 14:19:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x1040900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x4, 0x80000000010b, 0x4, 0x0, &(0x7f0000048000), 0x0) 14:19:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="66b8b9000f00d0c7442400b7fe0000c744240250260000c7442406000000000f011c240f78ba0000c0fe660f3834860a000000c4c275ac7c2c003e3e0f79970c00000066baf80cb8caae098cefb8000000000f23d00f21f835300000040f23f8ecc6f84c0f32f30fc736", 0x47}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 438.416403][T16836] bond0: (slave bond_slave_1): Releasing backup interface 14:19:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2, 0x3}, 0x10) pipe2(&(0x7f0000000040), 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x28f, 0x111d9) 14:19:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x60}}, 0x0) 14:19:33 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006a00030800000000a903000096a86c310000000008000100575aff9fefebf9ae20f36b1244254521a2f9925ee259dca893044ffe2e4173a03a0144abbbb4bc94813900dd683d1939066d757a3cc10ed9abce3edfc987bdd028d9a5605d1b73d76ea549ea01", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 14:19:33 executing program 5: r0 = socket$inet(0x2, 0x3, 0x400000002) setsockopt$inet_int(r0, 0x0, 0x10000000d4, 0x0, 0x4) 14:19:33 executing program 2: getpid() ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0x5df211b9}], 0x23a, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 14:19:33 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net\x00') exit(0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) 14:19:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xdc2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) pipe(0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x40046109, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0xc05c6104, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r3, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x884c) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r5, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0xe0390100) 14:19:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x50fe) 14:19:33 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0xc, 0x0, 0x6a0}}) [ 439.859070][ C0] net_ratelimit: 16 callbacks suppressed [ 439.859101][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 439.873369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.882753][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x1, 0x3, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x5f, 0x2e, 0x0, 0x80ffff, 0x2e, 0x2e], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 14:19:34 executing program 5: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x30000) [ 439.943583][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.949964][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 439.956672][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.963188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 439.969806][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.976434][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 439.983120][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:19:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x7000000}}]}, 0x40}}, 0x0) 14:19:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2, 0x3}, 0x10) pipe2(&(0x7f0000000040), 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x28f, 0x111d9) 14:19:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x8000000000000001, 0x31, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) 14:19:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x41}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a800000000000000000000039000900350002000000000019000500fe800010000000dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c0311000000190015", 0x2b}], 0x1}, 0x0) r3 = socket(0x10, 0x200080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:19:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c5efa79241a3384baa5b5db0700000068000a010000f8ff26"], 0x2b) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/117, 0x75}], 0x1) 14:19:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 440.646199][T16928] sg_write: data in/out 262577/1 bytes for SCSI command 0xa-- guessing data in; [ 440.646199][T16928] program syz-executor.0 not setting count and/or reply_len properly 14:19:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000840)={@loopback, @remote}, 0xc) 14:19:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xdc2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) pipe(0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x40046109, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0xc05c6104, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r3, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x884c) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r5, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0xe0390100) 14:19:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x8, 0x0, "5e752537c5b37831627d32017a8d07b80148d1eeb9667225cb26a2ae3e86f4474aa710ee616cc8a2b62cfb7deec1b9b83be3003f8e2a24bfe2593fc6e8ee136f698385e44ad6ea6ab7be3a360c129679"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @initdev}}, 0x0, 0x8, 0x0, "75254aa16d484c1b47df450b13772fb6cf5e941247de03060000007ed38aacc15f098c7f5ce9b58352a24adccfc5a7e20cbea9a2b0b85804dffd976c1501040000000000008b2f09e71737bb8c3faa3f"}, 0x31b) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x8, 0x0, "358fb6fb3cb01453e343ae37d07ee0295cf388ede091828a0ca91f63a97f726660d35833625ff78d1d1209319d219b7b157d7f93c3d0fa9b3b74b28f2dada20930d1a37a52513fef92176ccf7aa93aac"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 14:19:35 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @sdr}) 14:19:35 executing program 5: syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "001000", 0x4, 0x2f, 0x0, @loopback={0x2}, @mcast2, {[], @dccp={{0x0, 0x883e, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c09655", 0x0, "dee2f9"}}}}}}}, 0x0) 14:19:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2, 0x3}, 0x10) pipe2(&(0x7f0000000040), 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x28f, 0x111d9) 14:19:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 14:19:35 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="f4", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="f6", 0x1}], 0x1}, 0x0) 14:19:35 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @time, {0x5, 0x7fff}, {}, @queue}], 0x30) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 14:19:35 executing program 0: syz_open_dev$dmmidi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) gettid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001540)={{0x10b, 0x20, 0x0, 0x0, 0x0, 0x401, 0x1e8}, "", [[], [], [], []]}, 0x420) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2f3ecd}], 0x1, 0x0) 14:19:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 14:19:36 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="f4", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="f6", 0x1}], 0x1}, 0x0) 14:19:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2, 0x3}, 0x10) pipe2(&(0x7f0000000040), 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x28f, 0x111d9) 14:19:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xdc2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) pipe(0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x40046109, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0xc05c6104, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r3, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x884c) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r5, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0xe0390100) 14:19:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4400ae8f, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000240)=""/183, 0xb7}], 0x1, 0x0) dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:19:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 14:19:36 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="f4", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="f6", 0x1}], 0x1}, 0x0) 14:19:37 executing program 0: syz_open_dev$dmmidi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) gettid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001540)={{0x10b, 0x20, 0x0, 0x0, 0x0, 0x401, 0x1e8}, "", [[], [], [], []]}, 0x420) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2f3ecd}], 0x1, 0x0) 14:19:37 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="f4", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="f6", 0x1}], 0x1}, 0x0) 14:19:37 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x400c0930, &(0x7f00000001c0)) 14:19:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cc62e0a480e180f000000da136891120009000e00010000000000000000031204", 0x2e}], 0x1}, 0x0) 14:19:37 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x400c0930, &(0x7f00000001c0)) 14:19:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix_mp}) 14:19:37 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x400c0930, &(0x7f00000001c0)) 14:19:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffeb7, 0xfa00, {0x0, 0x0}}, 0x12) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000003ff8)=0x80) 14:19:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xdc2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) pipe(0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x40046109, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0xc05c6104, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r3, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x884c) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r5, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0xe0390100) 14:19:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/686], 0x0) 14:19:38 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x400c0930, &(0x7f00000001c0)) 14:19:38 executing program 4: unshare(0x600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, 0x0) 14:19:38 executing program 0: syz_open_dev$dmmidi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) gettid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001540)={{0x10b, 0x20, 0x0, 0x0, 0x0, 0x401, 0x1e8}, "", [[], [], [], []]}, 0x420) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2f3ecd}], 0x1, 0x0) 14:19:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) 14:19:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x1000, r2}) dup2(r2, r1) 14:19:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/686], 0x0) 14:19:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) 14:19:38 executing program 1: r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:19:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/686], 0x0) 14:19:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/686], 0x0) [ 444.983642][ C0] net_ratelimit: 28 callbacks suppressed [ 444.983668][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.996238][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:19:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000040)=0xb0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup2(r3, r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="6685aa16026d5f5fe935feb5e306303cc371d3567b3b0e7a566d7375483e6063d6937dcf", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000080)=0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup2(r8, r7) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000000)={r11, 0x0, 0x10}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r11, 0xc, "0c41f0ec61693d5a83effebd"}, &(0x7f0000000300)=0x14) r12 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x8, 0xb2f5f69ae1196ae5) r13 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa60000925b61c7d44a8ec48d59161301000000000000002e0000000001000000a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e4624116d4cfc3a00861fa55e2a981d4758ddbc98b1cd7c1d36935ab852cbe47ed9984130b6b2"], 0x14}}, 0x0) recvmmsg(r13, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000000380)={r1, 0x2, 0x401}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f00000000c0)={r14, 0x3}, &(0x7f0000000080)=0x8) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) recvmsg$kcm(r15, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001900)=""/209, 0xd1}], 0x2, &(0x7f0000001a40)}, 0x10120) 14:19:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) 14:19:39 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x14Ym1\xa9\xa22\x0fN\xcb\xa2\xba\xe5\xf4\x97\x00\x04\x00\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x3d1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd3, 0x0, &(0x7f0000000080)) 14:19:39 executing program 0: syz_open_dev$dmmidi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) gettid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001540)={{0x10b, 0x20, 0x0, 0x0, 0x0, 0x401, 0x1e8}, "", [[], [], [], []]}, 0x420) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2f3ecd}], 0x1, 0x0) 14:19:39 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x06\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 14:19:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x321, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=@fragment={0x88, 0x0, 0xc1, 0x0, 0x0, 0x6, 0x65}, 0x8) [ 445.627476][T17094] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.640634][T17104] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 445.648643][T17094] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. 14:19:39 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x14Ym1\xa9\xa22\x0fN\xcb\xa2\xba\xe5\xf4\x97\x00\x04\x00\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x3d1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd3, 0x0, &(0x7f0000000080)) 14:19:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 445.759745][T17106] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.815380][T17094] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. 14:19:40 executing program 3: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x200000004, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x2e, 0x2e, 0x5f, 0xe0, 0x80ffff]}, 0x3c) 14:19:40 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x06\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 14:19:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000040)=0xb0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup2(r3, r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="6685aa16026d5f5fe935feb5e306303cc371d3567b3b0e7a566d7375483e6063d6937dcf", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000080)=0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup2(r8, r7) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000000)={r11, 0x0, 0x10}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r11, 0xc, "0c41f0ec61693d5a83effebd"}, &(0x7f0000000300)=0x14) r12 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x8, 0xb2f5f69ae1196ae5) r13 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa60000925b61c7d44a8ec48d59161301000000000000002e0000000001000000a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e4624116d4cfc3a00861fa55e2a981d4758ddbc98b1cd7c1d36935ab852cbe47ed9984130b6b2"], 0x14}}, 0x0) recvmmsg(r13, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000000380)={r1, 0x2, 0x401}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f00000000c0)={r14, 0x3}, &(0x7f0000000080)=0x8) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) recvmsg$kcm(r15, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001900)=""/209, 0xd1}], 0x2, &(0x7f0000001a40)}, 0x10120) [ 446.104563][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 446.112372][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:40 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x14Ym1\xa9\xa22\x0fN\xcb\xa2\xba\xe5\xf4\x97\x00\x04\x00\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x3d1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd3, 0x0, &(0x7f0000000080)) [ 446.195780][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 446.203893][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 446.212505][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 446.220219][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 446.229581][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 446.237020][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) 14:19:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000040)=0xb0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup2(r3, r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="6685aa16026d5f5fe935feb5e306303cc371d3567b3b0e7a566d7375483e6063d6937dcf", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000080)=0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup2(r8, r7) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000000)={r11, 0x0, 0x10}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r11, 0xc, "0c41f0ec61693d5a83effebd"}, &(0x7f0000000300)=0x14) r12 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x8, 0xb2f5f69ae1196ae5) r13 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa60000925b61c7d44a8ec48d59161301000000000000002e0000000001000000a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e4624116d4cfc3a00861fa55e2a981d4758ddbc98b1cd7c1d36935ab852cbe47ed9984130b6b2"], 0x14}}, 0x0) recvmmsg(r13, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000000380)={r1, 0x2, 0x401}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f00000000c0)={r14, 0x3}, &(0x7f0000000080)=0x8) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) recvmsg$kcm(r15, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001900)=""/209, 0xd1}], 0x2, &(0x7f0000001a40)}, 0x10120) [ 446.299543][T17125] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 446.376902][T17128] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. 14:19:40 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x14Ym1\xa9\xa22\x0fN\xcb\xa2\xba\xe5\xf4\x97\x00\x04\x00\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x3d1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd3, 0x0, &(0x7f0000000080)) 14:19:40 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x06\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 446.580342][T17138] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 446.603583][T17138] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. 14:19:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000040)=0xb0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup2(r3, r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="6685aa16026d5f5fe935feb5e306303cc371d3567b3b0e7a566d7375483e6063d6937dcf", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000080)=0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup2(r8, r7) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000000)={r11, 0x0, 0x10}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r11, 0xc, "0c41f0ec61693d5a83effebd"}, &(0x7f0000000300)=0x14) r12 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x8, 0xb2f5f69ae1196ae5) r13 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa60000925b61c7d44a8ec48d59161301000000000000002e0000000001000000a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e4624116d4cfc3a00861fa55e2a981d4758ddbc98b1cd7c1d36935ab852cbe47ed9984130b6b2"], 0x14}}, 0x0) recvmmsg(r13, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000000380)={r1, 0x2, 0x401}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f00000000c0)={r14, 0x3}, &(0x7f0000000080)=0x8) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) recvmsg$kcm(r15, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001900)=""/209, 0xd1}], 0x2, &(0x7f0000001a40)}, 0x10120) 14:19:40 executing program 0: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000100)="04fe", 0x2, 0xfffffffffffffffb) 14:19:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000040)=0xb0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup2(r3, r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="6685aa16026d5f5fe935feb5e306303cc371d3567b3b0e7a566d7375483e6063d6937dcf", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000080)=0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup2(r8, r7) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000000)={r11, 0x0, 0x10}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r11, 0xc, "0c41f0ec61693d5a83effebd"}, &(0x7f0000000300)=0x14) r12 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x8, 0xb2f5f69ae1196ae5) r13 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa60000925b61c7d44a8ec48d59161301000000000000002e0000000001000000a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e4624116d4cfc3a00861fa55e2a981d4758ddbc98b1cd7c1d36935ab852cbe47ed9984130b6b2"], 0x14}}, 0x0) recvmmsg(r13, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000000380)={r1, 0x2, 0x401}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f00000000c0)={r14, 0x3}, &(0x7f0000000080)=0x8) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) recvmsg$kcm(r15, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001900)=""/209, 0xd1}], 0x2, &(0x7f0000001a40)}, 0x10120) 14:19:40 executing program 2: r0 = epoll_create(0x9) r1 = epoll_create(0x4) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create(0x961) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) 14:19:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653f0d89abf4d209bc876003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc158bb2b03b5b2461179f5f90bba001b5080da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bcb860d6a0b61193d4a1cb622431d42fee5e91531bfdfe5cb19ff15d6d891a92efa823a3c231ea82fdf0e7fc", 0xbe}], 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 446.915100][T17156] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 446.971682][T17165] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. 14:19:41 executing program 2: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x20000000014) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 14:19:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000040)=0xb0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup2(r3, r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="6685aa16026d5f5fe935feb5e306303cc371d3567b3b0e7a566d7375483e6063d6937dcf", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000080)=0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup2(r8, r7) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000000)={r11, 0x0, 0x10}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r11, 0xc, "0c41f0ec61693d5a83effebd"}, &(0x7f0000000300)=0x14) r12 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x8, 0xb2f5f69ae1196ae5) r13 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa60000925b61c7d44a8ec48d59161301000000000000002e0000000001000000a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e4624116d4cfc3a00861fa55e2a981d4758ddbc98b1cd7c1d36935ab852cbe47ed9984130b6b2"], 0x14}}, 0x0) recvmmsg(r13, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000000380)={r1, 0x2, 0x401}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f00000000c0)={r14, 0x3}, &(0x7f0000000080)=0x8) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) recvmsg$kcm(r15, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001900)=""/209, 0xd1}], 0x2, &(0x7f0000001a40)}, 0x10120) 14:19:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000802060000001900154004000000000022dc1338d54400009b84136ef75afb83de4431001600c43ab8220000060cec5d2791d4", 0x55}], 0x1}, 0x0) r2 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492596, 0x0) 14:19:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000040)=0xb0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup2(r3, r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="6685aa16026d5f5fe935feb5e306303cc371d3567b3b0e7a566d7375483e6063d6937dcf", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000080)=0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup2(r8, r7) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000000)={r11, 0x0, 0x10}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r11, 0xc, "0c41f0ec61693d5a83effebd"}, &(0x7f0000000300)=0x14) r12 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x8, 0xb2f5f69ae1196ae5) r13 = socket(0x50000000010, 0x80000000002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001430000000000da00500a4d0ebf0fc651970002000000b8a8631e9fa60000925b61c7d44a8ec48d59161301000000000000002e0000000001000000a9696bab0aac2a4e04cd3afa66d79f30624055a7adf99377a09285e3ac9dbeb8b070933ba069fb5e4624116d4cfc3a00861fa55e2a981d4758ddbc98b1cd7c1d36935ab852cbe47ed9984130b6b2"], 0x14}}, 0x0) recvmmsg(r13, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000000380)={r1, 0x2, 0x401}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f00000000c0)={r14, 0x3}, &(0x7f0000000080)=0x8) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) recvmsg$kcm(r15, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001900)=""/209, 0xd1}], 0x2, &(0x7f0000001a40)}, 0x10120) 14:19:41 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket(0x2, 0x5, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000)="cf", 0x2468d, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 14:19:41 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket(0x2, 0x5, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000)="cf", 0x2468d, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 14:19:43 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x06\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 14:19:43 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket(0x2, 0x5, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000)="cf", 0x2468d, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 14:19:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0xaaaaaaaaaaaac09, 0x0, [{}, {}, {}, {}]}) 14:19:43 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket(0x2, 0x5, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000)="cf", 0x2468d, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 14:19:43 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r7 = socket(0xa, 0x6, 0x8) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r9 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r8, @ANYBLOB="00042d020003000000e1bdd6100c0008000700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r10 = openat$cgroup_ro(r4, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r11, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800020000000000", 0x24) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="06000000", @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYPTR, @ANYRESDEC, @ANYRESHEX=r11, @ANYRES64=r3, @ANYRES64=r4, @ANYRESOCT=r13, @ANYRES64], @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r15, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r16 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r16, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:19:43 executing program 2: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x20000000014) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 14:19:43 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/39, &(0x7f00000000c0)) 14:19:43 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket(0x2, 0x5, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000)="cf", 0x2468d, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 14:19:43 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket(0x2, 0x5, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000)="cf", 0x2468d, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 14:19:44 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x375) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x2000000000000001, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r3, 0x8) r4 = fcntl$dupfd(r2, 0x406, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) iopl(0x3) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) rename(0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4000000004e23}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x10001}}) write$P9_RWALK(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="230000006f000000810000000000000400ec81fc2db9da2810cc6320c8880dbfa867a9e5ea55d0f860ca76ea84c3f4d4543fea207bce97cbc4242ef0d66c090000000000000006b714c42d1b96be742e2af97f3b8ba47622f840a036b1b813ca9b505334f8a7d9c984df0058200035222a73321ae38abcff43ebcdb71c8fa590c424ed5d29bc4129621c1fc82ac351b6bd5a962a26023761ef8fd17e8995894f75331e3ba11d28b09539cc6b7d7b47776fbe3b0e628cb36038914befb69df02452b083ea4097de39c968decf3404000000a66110f41682b4e961fdab11138c9c794e8dd087d8faf677fad34b1735cbf570df45abf617798dfc7baef37bcda55ca7ed4010126df25b5aad64c1df92754a263bbb53207e5ffbe2040214adf8c752f62acdf0b8ff16374c3e30e52b525160aa7ae60dea4543a1f55a1d442251e7cacc4f67a5060000000000000097807f038e8ee62a6fc037971662200000f502000000000000007e8da9cba397ed3be777017690afaeb80ec159bb8775f8d89d2da430a9ae266d1d388e4f92702f80be2bb805aee882fff290c96952c161079c5172fe16157d15a1f13966f39ea646149071589b53ede196f6e2a0a01ca79b72bf7a4a9d9ffae6ea09f600bba7900b3d044946c16571d63c83cce9b6885bd4172adbcb235b0700000000000000c50dd95dcb135aba70ed82b92f0effffffff971814000000000000000000000000000000000000000000000000000000000000ee167ab12658cf88504e0cba786a64895a5caee72738371af561b9f34aa01fb61fa108ad4a7d91033c16dbebb639833123ce227b5ed94fbfa3b68683b15c8442c0a01c1dc3b3eea8203cb9d38204de6cc40d2cde493533cf66bab7ab460a37d241e2651b22cca7e73cdb49b4537770640682ea00000000007a318d97831b18c35d351e8daa7b80ba166d84e27e6df1314998b61f69ab5c37e65661f0cc753504879a8b49634538f89517642d0f4e45f8282751558cb7a543d7b94b49ffffff7fa8cdf88899"], 0x2e4) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x40000000000001) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) 14:19:44 executing program 1: r0 = socket(0x10, 0x2, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000001041501ff0080fffd1d48e2ae0000000c000100010000007f2000010c000600ebff210000000000"], 0x2c}}, 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x2e4) [ 450.263660][ C1] net_ratelimit: 16 callbacks suppressed [ 450.263684][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.277856][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:44 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="31dd9638e37f", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x44, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864, 0xfffffffffffffd73}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) [ 450.338239][T17237] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 450.343545][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.353823][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 450.360441][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.367085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 450.373761][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.380486][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 450.387586][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.394218][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 450.397230][T17241] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 14:19:44 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket(0x2, 0x5, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000)="cf", 0x2468d, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 14:19:44 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r7 = socket(0xa, 0x6, 0x8) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r9 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r8, @ANYBLOB="00042d020003000000e1bdd6100c0008000700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r10 = openat$cgroup_ro(r4, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r11, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800020000000000", 0x24) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="06000000", @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYPTR, @ANYRESDEC, @ANYRESHEX=r11, @ANYRES64=r3, @ANYRES64=r4, @ANYRESOCT=r13, @ANYRES64], @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r15, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r16 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r16, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:19:44 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x375) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x2000000000000001, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r3, 0x8) r4 = fcntl$dupfd(r2, 0x406, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) iopl(0x3) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) rename(0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4000000004e23}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x10001}}) write$P9_RWALK(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2e4) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x40000000000001) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) 14:19:44 executing program 1: r0 = socket(0x10, 0x2, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000001041501ff0080fffd1d48e2ae0000000c000100010000007f2000010c000600ebff210000000000"], 0x2c}}, 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x2e4) 14:19:44 executing program 0: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x375) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x2000000000000001, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r3, 0x8) r4 = fcntl$dupfd(r2, 0x406, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) iopl(0x3) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) rename(0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4000000004e23}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x10001}}) write$P9_RWALK(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="230000006f000000810000000000000400ec81fc2db9da2810cc6320c8880dbfa867a9e5ea55d0f860ca76ea84c3f4d4543fea207bce97cbc4242ef0d66c090000000000000006b714c42d1b96be742e2af97f3b8ba47622f840a036b1b813ca9b505334f8a7d9c984df0058200035222a73321ae38abcff43ebcdb71c8fa590c424ed5d29bc4129621c1fc82ac351b6bd5a962a26023761ef8fd17e8995894f75331e3ba11d28b09539cc6b7d7b47776fbe3b0e628cb36038914befb69df02452b083ea4097de39c968decf3404000000a66110f41682b4e961fdab11138c9c794e8dd087d8faf677fad34b1735cbf570df45abf617798dfc7baef37bcda55ca7ed4010126df25b5aad64c1df92754a263bbb53207e5ffbe2040214adf8c752f62acdf0b8ff16374c3e30e52b525160aa7ae60dea4543a1f55a1d442251e7cacc4f67a5060000000000000097807f038e8ee62a6fc037971662200000f502000000000000007e8da9cba397ed3be777017690afaeb80ec159bb8775f8d89d2da430a9ae266d1d388e4f92702f80be2bb805aee882fff290c96952c161079c5172fe16157d15a1f13966f39ea646149071589b53ede196f6e2a0a01ca79b72bf7a4a9d9ffae6ea09f600bba7900b3d044946c16571d63c83cce9b6885bd4172adbcb235b0700000000000000c50dd95dcb135aba70ed82b92f0effffffff971814000000000000000000000000000000000000000000000000000000000000ee167ab12658cf88504e0cba786a64895a5caee72738371af561b9f34aa01fb61fa108ad4a7d91033c16dbebb639833123ce227b5ed94fbfa3b68683b15c8442c0a01c1dc3b3eea8203cb9d38204de6cc40d2cde493533cf66bab7ab460a37d241e2651b22cca7e73cdb49b4537770640682ea00000000007a318d97831b18c35d351e8daa7b80ba166d84e27e6df1314998b61f69ab5c37e65661f0cc753504879a8b49634538f89517642d0f4e45f8282751558cb7a543d7b94b49ffffff7fa8cdf88899"], 0x2e4) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x40000000000001) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) 14:19:44 executing program 2: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x20000000014) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 14:19:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) [ 450.754845][T17256] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 14:19:44 executing program 1: r0 = socket(0x10, 0x2, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000001041501ff0080fffd1d48e2ae0000000c000100010000007f2000010c000600ebff210000000000"], 0x2c}}, 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x2e4) [ 451.007637][T17280] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 14:19:45 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002740)=@ipv4_delroute={0x24, 0x19, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff, 0x3, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000015c0)=[{0x6, 0x0, &(0x7f0000000100), 0x2, &(0x7f0000000340)=[@iv={0x0, 0x117, 0x2, 0x0, "a8c984b9f7a4b0deca34f8de2066477c7fb680b3497ec6d89a4338580ebac886b45328468eabb888b99db577de80b6506091674861e51f1675d3f1b249db6277f90e67c251260faae615c8c58155961841492c61da2ebb1366c026bfc0d9056f56fa2994f633d82273ce2ac55bc3a7839959"}, @iv={0x0, 0x117, 0x2, 0x0, "c28108d751148691521f4af9b6d739cfa302edb8f84087b1b6d68aa5cbd1512986ae4521894992c09d2d2009f742124d7d98a22ff1f47b129c8b25097509c65bb39f7d87a9c50ea6c11bca976b88386f092091d4fab1406888c6664987813daf3683a00e7c0f7050f3a006b71c9fb0182449044532eb886628c165b7a604f99f84803774ef69a2d002cfc10b3d9bd5e99d315b36a3"}, @assoc, @iv={0x0, 0x117, 0x2, 0x0, "dc976e1e728b081134d423fa56de23b13219c71f2ca68fec3dab53c6518e73d40ab71e73c07d724575411ff5e5d04194e61b1c22398f7fe4a98ecdc2d85da4cc9c71f8efcb74f286e9d4561602acc395892c2dfe8fbdb0d9580a24a21faefd02d5b6014e568152a84ebe06776d5e3376a0350141d334ee6eece5e7cc69bb49a0a09b60e4ad3c616782564476596b6a47db03acead050647846084ed6f4775547930c337d06a35e804c37f2"}, @op, @op, @op, @iv={0x0, 0x117, 0x2, 0x0, "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"}]}], 0x492492492492297, 0x0) 14:19:45 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x375) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x2000000000000001, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r3, 0x8) r4 = fcntl$dupfd(r2, 0x406, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) iopl(0x3) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) rename(0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4000000004e23}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x10001}}) write$P9_RWALK(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="230000006f000000810000000000000400ec81fc2db9da2810cc6320c8880dbfa867a9e5ea55d0f860ca76ea84c3f4d4543fea207bce97cbc4242ef0d66c090000000000000006b714c42d1b96be742e2af97f3b8ba47622f840a036b1b813ca9b505334f8a7d9c984df0058200035222a73321ae38abcff43ebcdb71c8fa590c424ed5d29bc4129621c1fc82ac351b6bd5a962a26023761ef8fd17e8995894f75331e3ba11d28b09539cc6b7d7b47776fbe3b0e628cb36038914befb69df02452b083ea4097de39c968decf3404000000a66110f41682b4e961fdab11138c9c794e8dd087d8faf677fad34b1735cbf570df45abf617798dfc7baef37bcda55ca7ed4010126df25b5aad64c1df92754a263bbb53207e5ffbe2040214adf8c752f62acdf0b8ff16374c3e30e52b525160aa7ae60dea4543a1f55a1d442251e7cacc4f67a5060000000000000097807f038e8ee62a6fc037971662200000f502000000000000007e8da9cba397ed3be777017690afaeb80ec159bb8775f8d89d2da430a9ae266d1d388e4f92702f80be2bb805aee882fff290c96952c161079c5172fe16157d15a1f13966f39ea646149071589b53ede196f6e2a0a01ca79b72bf7a4a9d9ffae6ea09f600bba7900b3d044946c16571d63c83cce9b6885bd4172adbcb235b0700000000000000c50dd95dcb135aba70ed82b92f0effffffff971814000000000000000000000000000000000000000000000000000000000000ee167ab12658cf88504e0cba786a64895a5caee72738371af561b9f34aa01fb61fa108ad4a7d91033c16dbebb639833123ce227b5ed94fbfa3b68683b15c8442c0a01c1dc3b3eea8203cb9d38204de6cc40d2cde493533cf66bab7ab460a37d241e2651b22cca7e73cdb49b4537770640682ea00000000007a318d97831b18c35d351e8daa7b80ba166d84e27e6df1314998b61f69ab5c37e65661f0cc753504879a8b49634538f89517642d0f4e45f8282751558cb7a543d7b94b49ffffff7fa8cdf88899"], 0x2e4) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x40000000000001) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) 14:19:45 executing program 0: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x375) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x2000000000000001, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r3, 0x8) r4 = fcntl$dupfd(r2, 0x406, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) iopl(0x3) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) rename(0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4000000004e23}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x10001}}) write$P9_RWALK(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="230000006f000000810000000000000400ec81fc2db9da2810cc6320c8880dbfa867a9e5ea55d0f860ca76ea84c3f4d4543fea207bce97cbc4242ef0d66c090000000000000006b714c42d1b96be742e2af97f3b8ba47622f840a036b1b813ca9b505334f8a7d9c984df0058200035222a73321ae38abcff43ebcdb71c8fa590c424ed5d29bc4129621c1fc82ac351b6bd5a962a26023761ef8fd17e8995894f75331e3ba11d28b09539cc6b7d7b47776fbe3b0e628cb36038914befb69df02452b083ea4097de39c968decf3404000000a66110f41682b4e961fdab11138c9c794e8dd087d8faf677fad34b1735cbf570df45abf617798dfc7baef37bcda55ca7ed4010126df25b5aad64c1df92754a263bbb53207e5ffbe2040214adf8c752f62acdf0b8ff16374c3e30e52b525160aa7ae60dea4543a1f55a1d442251e7cacc4f67a5060000000000000097807f038e8ee62a6fc037971662200000f502000000000000007e8da9cba397ed3be777017690afaeb80ec159bb8775f8d89d2da430a9ae266d1d388e4f92702f80be2bb805aee882fff290c96952c161079c5172fe16157d15a1f13966f39ea646149071589b53ede196f6e2a0a01ca79b72bf7a4a9d9ffae6ea09f600bba7900b3d044946c16571d63c83cce9b6885bd4172adbcb235b0700000000000000c50dd95dcb135aba70ed82b92f0effffffff971814000000000000000000000000000000000000000000000000000000000000ee167ab12658cf88504e0cba786a64895a5caee72738371af561b9f34aa01fb61fa108ad4a7d91033c16dbebb639833123ce227b5ed94fbfa3b68683b15c8442c0a01c1dc3b3eea8203cb9d38204de6cc40d2cde493533cf66bab7ab460a37d241e2651b22cca7e73cdb49b4537770640682ea00000000007a318d97831b18c35d351e8daa7b80ba166d84e27e6df1314998b61f69ab5c37e65661f0cc753504879a8b49634538f89517642d0f4e45f8282751558cb7a543d7b94b49ffffff7fa8cdf88899"], 0x2e4) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x40000000000001) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) 14:19:45 executing program 1: r0 = socket(0x10, 0x2, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000001041501ff0080fffd1d48e2ae0000000c000100010000007f2000010c000600ebff210000000000"], 0x2c}}, 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x2e4) 14:19:45 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r7 = socket(0xa, 0x6, 0x8) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r9 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r8, @ANYBLOB="00042d020003000000e1bdd6100c0008000700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r10 = openat$cgroup_ro(r4, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r11, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800020000000000", 0x24) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="06000000", @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYPTR, @ANYRESDEC, @ANYRESHEX=r11, @ANYRES64=r3, @ANYRES64=r4, @ANYRESOCT=r13, @ANYRES64], @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r15, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r16 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r16, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 451.308676][T17293] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 14:19:45 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x375) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x2000000000000001, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r3, 0x8) r4 = fcntl$dupfd(r2, 0x406, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) iopl(0x3) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) rename(0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4000000004e23}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x10001}}) write$P9_RWALK(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="230000006f000000810000000000000400ec81fc2db9da2810cc6320c8880dbfa867a9e5ea55d0f860ca76ea84c3f4d4543fea207bce97cbc4242ef0d66c090000000000000006b714c42d1b96be742e2af97f3b8ba47622f840a036b1b813ca9b505334f8a7d9c984df0058200035222a73321ae38abcff43ebcdb71c8fa590c424ed5d29bc4129621c1fc82ac351b6bd5a962a26023761ef8fd17e8995894f75331e3ba11d28b09539cc6b7d7b47776fbe3b0e628cb36038914befb69df02452b083ea4097de39c968decf3404000000a66110f41682b4e961fdab11138c9c794e8dd087d8faf677fad34b1735cbf570df45abf617798dfc7baef37bcda55ca7ed4010126df25b5aad64c1df92754a263bbb53207e5ffbe2040214adf8c752f62acdf0b8ff16374c3e30e52b525160aa7ae60dea4543a1f55a1d442251e7cacc4f67a5060000000000000097807f038e8ee62a6fc037971662200000f502000000000000007e8da9cba397ed3be777017690afaeb80ec159bb8775f8d89d2da430a9ae266d1d388e4f92702f80be2bb805aee882fff290c96952c161079c5172fe16157d15a1f13966f39ea646149071589b53ede196f6e2a0a01ca79b72bf7a4a9d9ffae6ea09f600bba7900b3d044946c16571d63c83cce9b6885bd4172adbcb235b0700000000000000c50dd95dcb135aba70ed82b92f0effffffff971814000000000000000000000000000000000000000000000000000000000000ee167ab12658cf88504e0cba786a64895a5caee72738371af561b9f34aa01fb61fa108ad4a7d91033c16dbebb639833123ce227b5ed94fbfa3b68683b15c8442c0a01c1dc3b3eea8203cb9d38204de6cc40d2cde493533cf66bab7ab460a37d241e2651b22cca7e73cdb49b4537770640682ea00000000007a318d97831b18c35d351e8daa7b80ba166d84e27e6df1314998b61f69ab5c37e65661f0cc753504879a8b49634538f89517642d0f4e45f8282751558cb7a543d7b94b49ffffff7fa8cdf88899"], 0x2e4) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x40000000000001) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) 14:19:45 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) getsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, &(0x7f0000012ffc)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) dup3(r3, r0, 0x0) 14:19:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={0x0, 0x173, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 14:19:45 executing program 0: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x375) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x2000000000000001, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r3, 0x8) r4 = fcntl$dupfd(r2, 0x406, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) iopl(0x3) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) rename(0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4000000004e23}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x10001}}) write$P9_RWALK(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2e4) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x40000000000001) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) 14:19:46 executing program 2: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x20000000014) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 14:19:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300), 0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:19:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000007000000dc000000400000009500000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 14:19:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1008}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 14:19:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f003efb0a0002000300000000000f00060005000600", 0x2e}], 0x1}, 0x0) 14:19:46 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r7 = socket(0xa, 0x6, 0x8) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r9 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r8, @ANYBLOB="00042d020003000000e1bdd6100c0008000700"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r10 = openat$cgroup_ro(r4, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r11, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800020000000000", 0x24) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="06000000", @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYPTR, @ANYRESDEC, @ANYRESHEX=r11, @ANYRES64=r3, @ANYRES64=r4, @ANYRESOCT=r13, @ANYRES64], @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r15, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r16 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r16, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 452.188557][T17335] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 14:19:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1008}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 14:19:46 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001340)={0xa0, 0x0, 0x2, {{0x800000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}}}}, 0xa0) [ 453.526382][T17353] CUSE: zero length info key specified [ 453.565169][T17354] CUSE: zero length info key specified 14:19:47 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1008}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 14:19:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x7a, 0x0, [0x0, 0x0, 0xc0010003], [0x3a]}) 14:19:47 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0, 0x0) 14:19:47 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x4000000000002cd, 0x40000060, 0x0) [ 453.961898][T17360] fuse: Bad value for 'fd' 14:19:48 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1008}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 14:19:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300), 0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:19:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x7}, {0x6}]}) 14:19:49 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x4000000000002cd, 0x40000060, 0x0) 14:19:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x15) 14:19:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000003a80)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000003c0)) epoll_pwait(r2, &(0x7f0000dc7fc4)=[{}], 0x1, 0x0, 0x0, 0x0) 14:19:49 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 14:19:49 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001700d2000000"], 0x3c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:19:49 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x4000000000002cd, 0x40000060, 0x0) 14:19:49 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 14:19:49 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000200)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x8, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @remote, {[@generic={0x0, 0x7, "57f6f94e8a"}, @lsrr={0x83, 0x1b, 0x0, [@multicast2, @multicast1, @multicast1, @multicast2, @dev, @rand_addr]}, @rr={0x7, 0x1b, 0x0, [@local, @multicast1, @multicast1, @rand_addr, @dev, @multicast2]}]}}}}}}}, 0x0) 14:19:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300), 0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 455.463611][ C0] net_ratelimit: 24 callbacks suppressed [ 455.463634][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.477214][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 455.569717][T17400] netlink: 'syz-executor.4': attribute type 23 has an invalid length. 14:19:49 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x4000000000002cd, 0x40000060, 0x0) 14:19:50 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) [ 457.063556][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.069792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 457.076394][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.082611][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 457.089038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.095332][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 457.101601][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.107882][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x24, &(0x7f000055bfe4), 0x36f) 14:19:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x3a9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:19:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300), 0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:19:51 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 14:19:51 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321212c0f0df805000000"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYPTR64, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="e47e6d21f32a8aeb65365c54f972e7c2902bc0f68f797185f8765f5c2bd081734f6384ba364971c61be8b09843b60e04660fda3845934c6fc73ea87146955a609465704cfbc6e5d42d0a6171a2d8e9b240b86afa6e1c8ef02b91a424e93726b32c3fe24c325e7c8ffc06fa112b800653bdc003205bebd560d204a227fabad5c7f3af5d2828ba62bff95f796d2eecf3318952023ec24bf7813bb3d495bf7fb107a4bb686b4f5c33d16c6cd817f0fba783505c062c1c66afa9ac0d8bfbbcc50f5bcab20906dbaff2491e69e9e03f5a05f12ab1", @ANYRES16, @ANYRESHEX], @ANYRES32, @ANYRESOCT], @ANYRES16, @ANYRES64=0x0, @ANYBLOB="bdc75d69bcdf8cc36341bcefbcd717c2bc5aa7c2a878b9bfb0b854f09474fbbdc013411daf60ccb13bc3384e5eeb088a6cc9c4a040c884beadd4e5703da1332181492ae707d39f146d72673de4f2a1f3c7ee6d1eb92dfe34973cff889cef421f788cc9aec757bc09653082f2d56ae0e889842eed9fbb151459869da2f98fe504b49f84c2fdf95e0601aa37899ca67413bed1ac544014bb9ed3228d2cfbc5e4c62bf9992e70f21f5a5860f309002691e84f4e1d9b6f04a92466b5a3267bdce7847bf8ed02da87bde73f76c8282b43021e58dfac"], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) [ 457.371576][ C1] sd 0:0:1:0: [sg0] tag#1263 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 457.381313][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB: Test Unit Ready [ 457.388084][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.398016][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.407969][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.417909][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.428031][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.438001][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.447878][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.457706][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.467615][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.477453][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.487301][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.497325][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.507716][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.517563][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.527421][ C1] sd 0:0:1:0: [sg0] tag#1263 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:51 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x16, 0xfffffffe, 0x7fffffff, 0x37, 0x0, 0xffffffffffffffff, 0x4, [], 0x0, r1, 0x3, 0x3}, 0x3c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xaa0c1, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f70676473208d44ba353a16bf467be8eb15853f186febdd000000000000"], 0x1e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = semget(0x0, 0x3, 0x208) semctl$SETVAL(r5, 0x9c71d6960e96c4cc, 0x10, &(0x7f0000000080)=0x101) perf_event_open(&(0x7f000001d000)={0x1, 0x325, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x111, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000200)=0x7) creat(0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup2(0xffffffffffffffff, r4) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prctl$PR_GET_FP_MODE(0x2e) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x200000001) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 14:19:51 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 14:19:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) [ 457.993286][ C1] sd 0:0:1:0: [sg0] tag#1264 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 458.003055][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB: Test Unit Ready [ 458.006167][ C0] sd 0:0:1:0: [sg0] tag#1265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 458.010277][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.019756][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB: Test Unit Ready [ 458.029659][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.036472][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.046218][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.055919][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.065522][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.075177][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.084832][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.094491][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.104159][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.113794][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.123534][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.133175][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.142769][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.152415][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.162766][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.172427][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.182084][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.191741][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.201399][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.211148][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.221093][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.230750][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.240407][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.250070][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.259731][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.269358][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.279003][ C1] sd 0:0:1:0: [sg0] tag#1264 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.288753][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.306971][ C0] sd 0:0:1:0: [sg0] tag#1265 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:52 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x16, 0xfffffffe, 0x7fffffff, 0x37, 0x0, 0xffffffffffffffff, 0x4, [], 0x0, r1, 0x3, 0x3}, 0x3c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xaa0c1, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f70676473208d44ba353a16bf467be8eb15853f186febdd000000000000"], 0x1e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = semget(0x0, 0x3, 0x208) semctl$SETVAL(r5, 0x9c71d6960e96c4cc, 0x10, &(0x7f0000000080)=0x101) perf_event_open(&(0x7f000001d000)={0x1, 0x325, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x111, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000200)=0x7) creat(0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup2(0xffffffffffffffff, r4) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prctl$PR_GET_FP_MODE(0x2e) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x200000001) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 14:19:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) [ 458.611577][ C1] sd 0:0:1:0: [sg0] tag#1266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 458.621316][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB: Test Unit Ready [ 458.628085][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.637893][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.647669][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.657451][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.667436][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.677383][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.687374][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.697175][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.707583][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.717378][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.727622][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.737711][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.747599][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.757382][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.767173][ C1] sd 0:0:1:0: [sg0] tag#1266 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:52 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x16, 0xfffffffe, 0x7fffffff, 0x37, 0x0, 0xffffffffffffffff, 0x4, [], 0x0, r1, 0x3, 0x3}, 0x3c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xaa0c1, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f70676473208d44ba353a16bf467be8eb15853f186febdd000000000000"], 0x1e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = semget(0x0, 0x3, 0x208) semctl$SETVAL(r5, 0x9c71d6960e96c4cc, 0x10, &(0x7f0000000080)=0x101) perf_event_open(&(0x7f000001d000)={0x1, 0x325, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x111, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000200)=0x7) creat(0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup2(0xffffffffffffffff, r4) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prctl$PR_GET_FP_MODE(0x2e) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x200000001) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 14:19:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:52 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x16, 0xfffffffe, 0x7fffffff, 0x37, 0x0, 0xffffffffffffffff, 0x4, [], 0x0, r1, 0x3, 0x3}, 0x3c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xaa0c1, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f70676473208d44ba353a16bf467be8eb15853f186febdd000000000000"], 0x1e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = semget(0x0, 0x3, 0x208) semctl$SETVAL(r5, 0x9c71d6960e96c4cc, 0x10, &(0x7f0000000080)=0x101) perf_event_open(&(0x7f000001d000)={0x1, 0x325, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x111, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000200)=0x7) creat(0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup2(0xffffffffffffffff, r4) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prctl$PR_GET_FP_MODE(0x2e) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x200000001) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 14:19:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) [ 458.970104][ C0] sd 0:0:1:0: [sg0] tag#1267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 458.979803][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB: Test Unit Ready [ 458.986536][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.996394][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.006299][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.016231][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.026126][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.036016][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.045928][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.055769][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.065624][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.075434][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.085570][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.095547][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.105597][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) [ 459.115441][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.125231][ C0] sd 0:0:1:0: [sg0] tag#1267 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:53 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x16, 0xfffffffe, 0x7fffffff, 0x37, 0x0, 0xffffffffffffffff, 0x4, [], 0x0, r1, 0x3, 0x3}, 0x3c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xaa0c1, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f70676473208d44ba353a16bf467be8eb15853f186febdd000000000000"], 0x1e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = semget(0x0, 0x3, 0x208) semctl$SETVAL(r5, 0x9c71d6960e96c4cc, 0x10, &(0x7f0000000080)=0x101) perf_event_open(&(0x7f000001d000)={0x1, 0x325, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x111, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000200)=0x7) creat(0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup2(0xffffffffffffffff, r4) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prctl$PR_GET_FP_MODE(0x2e) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x200000001) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 14:19:53 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x16, 0xfffffffe, 0x7fffffff, 0x37, 0x0, 0xffffffffffffffff, 0x4, [], 0x0, r1, 0x3, 0x3}, 0x3c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xaa0c1, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f70676473208d44ba353a16bf467be8eb15853f186febdd000000000000"], 0x1e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = semget(0x0, 0x3, 0x208) semctl$SETVAL(r5, 0x9c71d6960e96c4cc, 0x10, &(0x7f0000000080)=0x101) perf_event_open(&(0x7f000001d000)={0x1, 0x325, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x111, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000200)=0x7) creat(0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup2(0xffffffffffffffff, r4) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prctl$PR_GET_FP_MODE(0x2e) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x200000001) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 14:19:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) [ 459.329832][ C1] sd 0:0:1:0: [sg0] tag#1269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 459.339637][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB: Test Unit Ready [ 459.346523][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.356496][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.367313][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.377661][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.387503][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.397363][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.407257][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.417239][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) [ 459.427086][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.436945][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.446799][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.456733][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.466572][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.476647][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.486493][ C1] sd 0:0:1:0: [sg0] tag#1269 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.577731][ C0] sd 0:0:1:0: [sg0] tag#1268 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 459.587384][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB: Test Unit Ready [ 459.594198][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.604086][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.613997][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.623791][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.633640][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.643577][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.653425][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.663210][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.673072][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.682794][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.692652][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.702469][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.712337][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:19:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) [ 459.722158][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.732006][ C0] sd 0:0:1:0: [sg0] tag#1268 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:53 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x16, 0xfffffffe, 0x7fffffff, 0x37, 0x0, 0xffffffffffffffff, 0x4, [], 0x0, r1, 0x3, 0x3}, 0x3c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xaa0c1, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f70676473208d44ba353a16bf467be8eb15853f186febdd000000000000"], 0x1e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = semget(0x0, 0x3, 0x208) semctl$SETVAL(r5, 0x9c71d6960e96c4cc, 0x10, &(0x7f0000000080)=0x101) perf_event_open(&(0x7f000001d000)={0x1, 0x325, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x111, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000200)=0x7) creat(0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup2(0xffffffffffffffff, r4) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prctl$PR_GET_FP_MODE(0x2e) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x200000001) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001bc0)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) [ 459.840948][ C1] sd 0:0:1:0: [sg0] tag#1270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 459.850750][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB: Test Unit Ready [ 459.857592][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.867669][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.877591][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.887593][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.897589][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.907516][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.917438][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.927549][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.937550][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.945304][ C0] sd 0:0:1:0: [sg0] tag#1216 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 459.947411][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.956811][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB: Test Unit Ready [ 459.966508][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.972993][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.982660][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.992551][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.002311][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.012180][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.021953][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.031575][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.041433][ C1] sd 0:0:1:0: [sg0] tag#1270 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.051147][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.059974][ C1] sd 0:0:1:0: [sg0] tag#1271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 460.069436][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.079555][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB: Test Unit Ready [ 460.089187][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.095749][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.105691][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.115386][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.125024][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.134730][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.144473][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.154238][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.164261][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.174057][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.183701][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.193402][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.203026][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.212661][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.222308][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.232021][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.241834][ C0] sd 0:0:1:0: [sg0] tag#1216 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.251551][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.270348][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.280295][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.290203][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.300227][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.310088][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.319968][ C1] sd 0:0:1:0: [sg0] tag#1271 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 14:19:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) [ 460.499470][ C0] net_ratelimit: 14 callbacks suppressed [ 460.499493][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 460.511494][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:19:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) [ 461.223485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.230010][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 461.236648][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.243403][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 461.250259][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.256790][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 461.263334][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.269747][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:19:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r3, 0x540b, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, 0x0) 14:19:55 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 14:19:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:55 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 14:19:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b"], 0x65) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x228104) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x80000) r9 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r9, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r11, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r12}, 0x18, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) 14:19:56 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r3, 0x540b, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, 0x0) 14:19:56 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0xcf, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0xa0363159, 0x0, @stepwise}) 14:19:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6, 0xf247104245d0b096}, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:19:56 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 14:19:56 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd8, 0x0, &(0x7f0000000000)) 14:19:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @dev}, @in6}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r4, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(r4, 0x0, 0x15, &(0x7f0000000200)='D', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$isdn(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x80, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) sendto$inet(r1, &(0x7f0000000240)="f4", 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:19:56 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x400000000b, 0x0, 0x0) 14:19:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6, 0xf247104245d0b096}, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:19:56 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r3, 0x540b, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, 0x0) 14:19:56 executing program 4: keyctl$invalidate(0x15, 0x0) 14:19:56 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 462.620278][T17608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:19:56 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x400000000b, 0x0, 0x0) 14:19:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6, 0xf247104245d0b096}, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:19:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a005", 0x18, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x18, 0x0, [@guehdr={0x8, 0x0, 0x0, 0x2, 0x0, [0x2000000]}, @guehdr={0x1}, @guehdr={0x1}]}}}}}}, 0x0) 14:19:56 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r3, 0x540b, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, 0x0) 14:19:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2bf, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @dev, 0x4}, @in={0x2, 0x0, @dev}]}, &(0x7f0000000180)=0x10) 14:19:57 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x400000000b, 0x0, 0x0) [ 463.081593][T17634] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:19:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @dev}, @in6}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r4, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(r4, 0x0, 0x15, &(0x7f0000000200)='D', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$isdn(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x80, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) sendto$inet(r1, &(0x7f0000000240)="f4", 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:19:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6, 0xf247104245d0b096}, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:19:57 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x400000000b, 0x0, 0x0) 14:19:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@rand_addr="9a6d6b774c11af1e2aecf8af6c3acf7c", 0x0, 0x4, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:19:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:19:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000a40)={0xfffffffffffffffa, 0x0, @ioapic}) 14:19:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)=0x2) 14:19:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)) r2 = epoll_create(0x3) r3 = epoll_create(0x4) r4 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000dff4)) [ 463.580305][T17660] kvm: apic: phys broadcast and lowest prio 14:19:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x5, [0x49, 0x0, 0x40000071, 0x70058501], [0xc1]}) [ 463.761890][T17674] kvm: apic: phys broadcast and lowest prio 14:19:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f00000003c0)={0x80000001, 0x0, 0x303f, 0x3ff, 0x1f, {0xb0, 0xa532}, 0x1}) pipe(0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) pipe(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') lseek(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x5201}], 0x1b, 0x0) timer_create(0xc4f9df441c07914f, 0x0, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/129, 0x132, 0x81}, 0x20) r4 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x8, 0x10000) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f00000004c0)=""/236, &(0x7f00000005c0)=0xec) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 14:19:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @dev}, @in6}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r4, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(r4, 0x0, 0x15, &(0x7f0000000200)='D', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$isdn(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x80, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) sendto$inet(r1, &(0x7f0000000240)="f4", 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:19:58 executing program 0: ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) semget$private(0x0, 0x0, 0xc) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) fstat(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x24000000) 14:19:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 14:19:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"0f43dc24a4abaecdaddbcdb9cec0a6657d9881908933cb612ff960ea2a9b2b70b9ea6bfec964573ab0f448d695f37464245ec9b14a5363c64592d71cb242f2b69394875a3112742db3d8d02daa2d4a3b479f5faa1882843c674c77ff62ca13c97819109c35851a443112b910114d595c35d6762906a47f933d87216162799adb80176fcfe534b1e0ceac13a0ff5e28594b92cc45df1c93b966c2b81223d33e5b51231fe0de1e564315c22c506d5ffea4eb8aad1ebb2034e4c3f38fe2c5dbedd31bbbf8b173aa5286cd78e3dfa8bb929a4d49f2e88fd718593afd0f6286ca3dcb9ee78103a040b5a305e913b52f98fc3275c9127b17766935dbd422ac8850272d96c90e6f19b6ac16204d395ae1913fd62e85fd5d8908a5d375af95788c93d388936b1fe9d692dac4ebceeb14b86687b03bde43d7721dae7852ef50a7792680b067f1b3b2dfabd10e7082c650196adf227817fb0ab479e5bab3bd20ed281ed735f3dfa6f2a8cd22d005684c211b78abf44245d78a4109c6bb1df039f0ac135654ff61bda117637dd60ff9f50e470244057c2a1d67e9f4cb7a21d033d1bf46338ec4c718857e1c1b6594c8d142f57135de02b9984ecdfc172dc5472649369d048c9be4905fd9442adacb783c1054e8c226a5cacd8e8b14b0d3d7dc5bd11fc5d07e47d81f5f171d4a51b9ba3910544b561ede42a7200e7a46c73ab0f3a1003cced01e062432bb3ed41b5da7b478e379e52bca4c059a6dab6efdebb6b5ddc1d40405e89710f82ac397aa746ed54c92458f1320e4a959e0008c2ce85dc8909ebc0e149bcfef9beb32756eafa5ec02549c16f8c020558017cfbe3d20c4854af5c451ee66553b9fb6634692968177efaecf835490756f2f25732f51c9655376bc46e965deae44a0ef984377b066c6cfe32078bbb2c91307f57b29c368e716a85139b9d79903854e795d227e52f2fedeff0a827b2e23713007035883b20cc7330c083baef81256ced4e84048407e5738968ff93a62120d970359d76861ecd99f8aeec4423d1599b3c23cf47f7feb7d5a30481e1b10131eff7cabd7b11371cc5ce393a7a841fd22863e65be5c8a67016101ffe1ba5acb24df53f022970fed8a7a53d14d00e7c3fd7944bf323b76ce965d98546f524fdb809fd0421cd2a783d15b17d0102dfaa1e7499995a39115fc13f8289bef83dead4b061254685042d15274537ccaadc1ce8f6e37c3e5de8b5a1f67db349b807464b3c4a85b36bc412cf90482815817c0af5e46c100371a20b57a0bdd43f625442185b6be9d119667010d40f563d1dfad667bf2b2c78999452f373012305c32ee950d39c75e18d63c73e027fddc02755bd41619fe29d35decfe2de3acb8fc7df3cf9c97d79ba45e387a6e034b2de4f99b1fb324fa8130e76257fb21a2cef3406d5a7c82a88eb61650b3bc3da163d7e3"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000a40)={0xfffffffffffffffa, 0x0, @ioapic}) [ 463.962374][T17678] kvm [17677]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 464.240959][T17694] kvm: apic: phys broadcast and lowest prio [ 464.286037][T17684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 464.397390][T17684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.412467][T17684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:19:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 14:19:58 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) write(r1, &(0x7f0000000340)="240000002100255107000165ff00fc020a0066c400000000", 0x18) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400f3ffffff", 0x8, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 14:19:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @dev}, @in6}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r4, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(r4, 0x0, 0x15, &(0x7f0000000200)='D', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$isdn(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x80, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) sendto$inet(r1, &(0x7f0000000240)="f4", 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:19:58 executing program 0: r0 = socket$inet(0x2, 0x3, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x5}) 14:19:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"0f43dc24a4abaecdaddbcdb9cec0a6657d9881908933cb612ff960ea2a9b2b70b9ea6bfec964573ab0f448d695f37464245ec9b14a5363c64592d71cb242f2b69394875a3112742db3d8d02daa2d4a3b479f5faa1882843c674c77ff62ca13c97819109c35851a443112b910114d595c35d6762906a47f933d87216162799adb80176fcfe534b1e0ceac13a0ff5e28594b92cc45df1c93b966c2b81223d33e5b51231fe0de1e564315c22c506d5ffea4eb8aad1ebb2034e4c3f38fe2c5dbedd31bbbf8b173aa5286cd78e3dfa8bb929a4d49f2e88fd718593afd0f6286ca3dcb9ee78103a040b5a305e913b52f98fc3275c9127b17766935dbd422ac8850272d96c90e6f19b6ac16204d395ae1913fd62e85fd5d8908a5d375af95788c93d388936b1fe9d692dac4ebceeb14b86687b03bde43d7721dae7852ef50a7792680b067f1b3b2dfabd10e7082c650196adf227817fb0ab479e5bab3bd20ed281ed735f3dfa6f2a8cd22d005684c211b78abf44245d78a4109c6bb1df039f0ac135654ff61bda117637dd60ff9f50e470244057c2a1d67e9f4cb7a21d033d1bf46338ec4c718857e1c1b6594c8d142f57135de02b9984ecdfc172dc5472649369d048c9be4905fd9442adacb783c1054e8c226a5cacd8e8b14b0d3d7dc5bd11fc5d07e47d81f5f171d4a51b9ba3910544b561ede42a7200e7a46c73ab0f3a1003cced01e062432bb3ed41b5da7b478e379e52bca4c059a6dab6efdebb6b5ddc1d40405e89710f82ac397aa746ed54c92458f1320e4a959e0008c2ce85dc8909ebc0e149bcfef9beb32756eafa5ec02549c16f8c020558017cfbe3d20c4854af5c451ee66553b9fb6634692968177efaecf835490756f2f25732f51c9655376bc46e965deae44a0ef984377b066c6cfe32078bbb2c91307f57b29c368e716a85139b9d79903854e795d227e52f2fedeff0a827b2e23713007035883b20cc7330c083baef81256ced4e84048407e5738968ff93a62120d970359d76861ecd99f8aeec4423d1599b3c23cf47f7feb7d5a30481e1b10131eff7cabd7b11371cc5ce393a7a841fd22863e65be5c8a67016101ffe1ba5acb24df53f022970fed8a7a53d14d00e7c3fd7944bf323b76ce965d98546f524fdb809fd0421cd2a783d15b17d0102dfaa1e7499995a39115fc13f8289bef83dead4b061254685042d15274537ccaadc1ce8f6e37c3e5de8b5a1f67db349b807464b3c4a85b36bc412cf90482815817c0af5e46c100371a20b57a0bdd43f625442185b6be9d119667010d40f563d1dfad667bf2b2c78999452f373012305c32ee950d39c75e18d63c73e027fddc02755bd41619fe29d35decfe2de3acb8fc7df3cf9c97d79ba45e387a6e034b2de4f99b1fb324fa8130e76257fb21a2cef3406d5a7c82a88eb61650b3bc3da163d7e3"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000a40)={0xfffffffffffffffa, 0x0, @ioapic}) 14:19:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) [ 465.029805][T17714] kvm: apic: phys broadcast and lowest prio 14:19:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 14:19:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f00000003c0)={0x80000001, 0x0, 0x303f, 0x3ff, 0x1f, {0xb0, 0xa532}, 0x1}) pipe(0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) pipe(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') lseek(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x5201}], 0x1b, 0x0) timer_create(0xc4f9df441c07914f, 0x0, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/129, 0x132, 0x81}, 0x20) r4 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x8, 0x10000) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f00000004c0)=""/236, &(0x7f00000005c0)=0xec) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 14:19:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0xf2, "867328c6cb7a672da0c0eceada860c9b97388596da91a9dc4d1d080eca98abf7"}) 14:19:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000a40)={0xfffffffffffffffa, 0x0, @ioapic}) 14:19:59 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) io_setup(0x200000003, &(0x7f00000000c0)=0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 14:19:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0x3, 0x8, 0x319, 0x0, 0x0, {}, [@nested={0x8, 0x2, [@generic="cf"]}, @typed={0x34, 0x3, @str='keyringeth0vmnet1cgroupppp1[eth0vboxnet1user\x00'}]}, 0x50}}, 0x0) 14:19:59 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) write(r1, &(0x7f0000000340)="240000002100255107000165ff00fc020a0066c400000000", 0x18) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400f3ffffff", 0x8, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) [ 465.621790][T17744] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 465.630985][T17744] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 465.698152][T17735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 465.715241][T17735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.723732][T17735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:19:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@init={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x38}], 0x1, 0x0) [ 465.840656][T17750] net_ratelimit: 27 callbacks suppressed [ 465.840689][T17750] skbuff: bad partial csum: csum=65535/0 headroom=2 headlen=14 14:19:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x3, 0x1081000981900, 0x1}) 14:19:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@deltfilter={0x48, 0x2d, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x4}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x4}}]}, 0x48}}, 0x0) 14:20:00 executing program 3: unshare(0x20400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x2000) 14:20:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@init={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x38}], 0x1, 0x0) 14:20:00 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f00009b6000/0x4000)=nil) 14:20:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f00000003c0)={0x80000001, 0x0, 0x303f, 0x3ff, 0x1f, {0xb0, 0xa532}, 0x1}) pipe(0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) pipe(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') lseek(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x5201}], 0x1b, 0x0) timer_create(0xc4f9df441c07914f, 0x0, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/129, 0x132, 0x81}, 0x20) r4 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x8, 0x10000) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f00000004c0)=""/236, &(0x7f00000005c0)=0xec) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 14:20:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x10000000}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x271) close(r0) 14:20:00 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00070f000000000000008007"], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:20:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@init={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x38}], 0x1, 0x0) [ 466.392729][T17782] __nla_validate_parse: 6 callbacks suppressed [ 466.392796][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:20:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@init={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x38}], 0x1, 0x0) 14:20:00 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) write(r1, &(0x7f0000000340)="240000002100255107000165ff00fc020a0066c400000000", 0x18) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400f3ffffff", 0x8, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 14:20:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) 14:20:00 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 14:20:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x26f, &(0x7f00000003c0)={&(0x7f0000000000)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 14:20:00 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) write(r0, &(0x7f00000000c0)="84", 0x1) r1 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe03) 14:20:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f00000003c0)={0x80000001, 0x0, 0x303f, 0x3ff, 0x1f, {0xb0, 0xa532}, 0x1}) pipe(0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) pipe(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') lseek(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x5201}], 0x1b, 0x0) timer_create(0xc4f9df441c07914f, 0x0, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800a4000000a4000000030000000000000000000003000000000500000003000000f5000000070000000000000b02000000060000000000000a050000000a0000000000000100000000270031000b00000200000084f8ffffff0200000004000000040000000a000000000000000080000007000000010000000200000005090000000000000000000006000000ffffff7f0200000001000000fcffffff030000000000000e030000000000000000000000000000000076eccb9032946b5f6e49d4f4db29f1775d12811aedb6041e187942d4153d3f01dceed2ee77512b8f9cae60f1328ec3f1f5d1cc1f9e618cd541004c2b0e9282f8d5008eed57f1f860fed52d95179654ad0bd73238411d9179a625231cd0f0331d601b9c593e6d2e3e4a777a332ecce1feb3f3aa82f25a0a"], &(0x7f0000000280)=""/129, 0x132, 0x81}, 0x20) r4 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x8, 0x10000) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f00000004c0)=""/236, &(0x7f00000005c0)=0xec) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 466.885472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 466.892405][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:20:01 executing program 0: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) [ 467.030581][T17804] skbuff: bad partial csum: csum=65535/0 headroom=2 headlen=14 14:20:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000580)=0x0) io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r2 = eventfd2(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x2, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x0]) 14:20:01 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) [ 467.266190][T17816] sctp: [Deprecated]: syz-executor.0 (pid 17816) Use of int in max_burst socket option deprecated. [ 467.266190][T17816] Use struct sctp_assoc_value instead [ 467.287410][T17809] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 467.399213][T17809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 467.414157][T17809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.463845][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 467.470251][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 467.477323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 467.484973][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 467.492119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 467.498930][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:20:01 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 14:20:01 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) write(r1, &(0x7f0000000340)="240000002100255107000165ff00fc020a0066c400000000", 0x18) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400f3ffffff", 0x8, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) [ 467.944137][T17814] sctp: [Deprecated]: syz-executor.0 (pid 17814) Use of int in max_burst socket option deprecated. [ 467.944137][T17814] Use struct sctp_assoc_value instead 14:20:02 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 14:20:02 executing program 0: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) 14:20:02 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 14:20:02 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) [ 468.206714][T17839] sctp: [Deprecated]: syz-executor.0 (pid 17839) Use of int in max_burst socket option deprecated. [ 468.206714][T17839] Use struct sctp_assoc_value instead 14:20:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='io.bfq.weight\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000022) 14:20:02 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 14:20:02 executing program 0: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) 14:20:02 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 14:20:02 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 14:20:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1}, 0x8) [ 468.566796][T17858] sctp: [Deprecated]: syz-executor.0 (pid 17858) Use of int in max_burst socket option deprecated. [ 468.566796][T17858] Use struct sctp_assoc_value instead 14:20:02 executing program 4: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x1a5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) 14:20:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, 0x6e6bb3}}, 0x50}}, 0x0) 14:20:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1}, 0x8) 14:20:02 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, "77807cc53bd6"}) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 14:20:02 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb5, 0x0, &(0x7f0000000000)) 14:20:03 executing program 0: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) 14:20:03 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x15}]}, 0x10) 14:20:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1}, 0x8) [ 469.120643][T17886] sctp: [Deprecated]: syz-executor.0 (pid 17886) Use of int in max_burst socket option deprecated. [ 469.120643][T17886] Use struct sctp_assoc_value instead 14:20:03 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb5, 0x0, &(0x7f0000000000)) 14:20:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') sendfile(r0, r0, 0x0, 0x3) 14:20:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x7c96) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x80000005}) 14:20:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1}, 0x8) 14:20:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r2, 0x0, 0x20, 0x0, 0x155) 14:20:03 executing program 0: semget(0x2, 0x0, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 14:20:03 executing program 4: r0 = io_uring_setup(0xd, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r0, 0x0, 0x20000000, 0x3, 0x0, 0xfffffffffffffda3) 14:20:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc74424060000008a0000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x52}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x9, 0x8, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@mcast1}, 0x14) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:20:03 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb5, 0x0, &(0x7f0000000000)) 14:20:03 executing program 0: semget(0x2, 0x0, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 14:20:03 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000000aff0)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0xfffffffffffffffd, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0xfffffe84) [ 469.719083][T17916] kvm [17915]: vcpu0, guest rIP: 0x185 Hyper-V unhandled rdmsr: 0x40000078 14:20:03 executing program 5: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000080)="b9280800000f32440f20c0350a000000440f22c036660f1181007a000066f30f093ef36c9a0e8c0000c8003e65260f073e0f01f1c4e149da52a72e36660f06", 0x3f}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:20:03 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb5, 0x0, &(0x7f0000000000)) 14:20:04 executing program 0: semget(0x2, 0x0, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 14:20:04 executing program 4: pipe(&(0x7f0000000100)) 14:20:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffd5, 0x0}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="df85", 0x2}], 0x1}, 0x0) 14:20:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000077000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="000007000000000003000000080001006270660050000200080004000000000004000500400002003c0001000000ff030004000000000400000000000000e6290000000000000000110000000000000000000000000000000000000000001c00000000006b8af1fa454921483b79b0ed762852a47e69e60c061f9c871cc395fa86f369a04912c9e69817f049ec6df0e44a2b27bc64af847665f32224e4d778548bc7cba4aad65985da75ad8f3dcb3ee4b78dd97dc5e138da76d28c07639b67c57cc5df12fe95535049"], 0x7c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x25e, 0x0) 14:20:04 executing program 2: syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x1c, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[@hopopts={0x2b}], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 14:20:04 executing program 0: semget(0x2, 0x0, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 14:20:04 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, 0x0) [ 470.270989][T17948] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 14:20:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, r2, 0x11, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) 14:20:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2, 0x1000000}, [@nested={0x18, 0x0, [@typed={0xd, 0x1, @ipv6=@loopback={0xfeffffff00000000}}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 14:20:04 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000380)=""/199, 0xc7}], 0x1) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) 14:20:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @pic={0x0, 0x41, 0x0, 0x1f}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x3, 0x8}) [ 470.607800][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:20:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0xffbd}], 0x1) 14:20:04 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2340, 0x0) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)="9a", 0x1}], 0x1, 0x0) 14:20:04 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f00000000c0)) 14:20:04 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x1}, 0x8) connect$inet6(r0, &(0x7f00000041c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) 14:20:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0xffbd}], 0x1) 14:20:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000480)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x7bb}}) 14:20:05 executing program 4: unshare(0x20400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x800000000008982, 0x0) [ 470.993438][ C0] net_ratelimit: 17 callbacks suppressed [ 470.993462][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 471.006513][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:20:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) 14:20:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0xffbd}], 0x1) 14:20:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000480)='dev\x00\xcbh\x80\x87\x1d\xf6\xbe\x8f^K;\xf0z|x}\xdb\xc7\xc2\x1c(\x05\x91\x1f\v\x87(\xe8vB\x87\xb7U\r`I\xb3p\xc2\xd8\x809\xbex\xee\x97e\xe9\x93\x85\xe4\xc6g\xcb\xed\xeak\xdb\x96%zx\xed2m\xe7\xdbK\x93\xc7\x96BLA`A\x17\x8dH\x8f\x89\n\xc2~v\xdd\xe9\xeb\xb5F\xc7\x85\x9cwe\xf8\xb4\xcd\x9f\xf5\x89W\xf9\"\xf8\xba\xfc;#\xa7\x18\xa1\n\xd3\x9e\xd9\xbfO\xff\x00\xc8=\xb9A\xd69\xf6\xca\x80\r\xe9\x01\x88H\xa9\xf4\xfa\xff\xff\xff\xa0\xb7\x1e\x1bp\xe1 \xaf\xae\xb7\xade;\xab\x19:TU\xf9\xe8W\xf9\xc0|\xc6\x03\x05$\xe2w\xbc.\x17\x03\x91\xaf\xca\xe9\x95\x82\x7f\x03|\xe4\x0fhT\x9a\a\x92o\x98\'\x84\xedP\x98\xbf@zo\xb1f\x9d\xef\f\xc3\x8dp,\'\xad\x14\x1e\t\a\xfa+q\xd8\x1f\xf10#\xc3\xf6\xdf\xf0\'Fl@\x00\x00\x00\xbd\x01\xd6\xd0\xa4w^c\xde\xe1\nx\xb9&\x12\xf4\v1\xd6R+\xca\x9e\x9e5\xdf\x81U\xd5pT\xdaK?\xc2o\xceW\xf5iK\x03\x9f\x9c\x9fh\xe1]~\xab\x05\xb5\xa7T\x9cQ\x1a\x84\xbb\xbe\xec\xb2&D\x81\x81\x8f\xbe\x1eG 4i\x81\xb6\xbb\x1d\x9d0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) dup2(r3, r1) 14:20:05 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x0, @vbi}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x2) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000005c0)={0x67446698, 0x0, 0x3, 0x0, 0x0, "446b9ac84f29bcfb606cd31ef0a682eafdb229c604ce9c2bfbc67951e89753a7c9742e183855563b1d9235e3bf51c7f88ea60e98c01cbad6d3b9348b7c56c7cd4bc5974db1821353cc6f1b7c0120b3eb79f4fe60ad5498a12ee3b371cfe5506731110b37d8b116920de865c1e1903660684a"}, 0x82) r4 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) unshare(0x40000000) 14:20:05 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGREP(r1, 0x8004745a, &(0x7f0000d1df52)=""/174) 14:20:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0}) [ 471.376132][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 14:20:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0xffbd}], 0x1) [ 471.553657][T18009] IPVS: ftp: loaded support on port[0] = 21 14:20:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17b}]}) 14:20:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x238) [ 471.631126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 471.637494][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 471.644043][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 471.650658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 471.657294][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 471.664039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 471.670984][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:20:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 14:20:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) 14:20:06 executing program 3: unshare(0x400) r0 = socket$inet(0x2, 0x3, 0x80000000002) fallocate(r0, 0x0, 0x0, 0x1f1) 14:20:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000000040)='/', 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r3 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(0xffffffffffffffff, 0x0, 0x7fff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x8, 0x0, 0x8000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @local}, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80f, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000080)=0xfffffffffffffffe) socket$inet(0x2, 0x3, 0x2) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000040), 0x8) 14:20:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17b}]}) 14:20:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 472.542352][T18019] IPVS: ftp: loaded support on port[0] = 21 14:20:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:20:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20016000, &(0x7f0000015000/0x1000)=nil}) close(r1) 14:20:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17b}]}) 14:20:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 14:20:08 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002d000100000000810000000000000000", @ANYRES32, @ANYBLOB="03000e00000000000000000008000b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008850}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) 14:20:08 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x0, @vbi}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x2) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000005c0)={0x67446698, 0x0, 0x3, 0x0, 0x0, "446b9ac84f29bcfb606cd31ef0a682eafdb229c604ce9c2bfbc67951e89753a7c9742e183855563b1d9235e3bf51c7f88ea60e98c01cbad6d3b9348b7c56c7cd4bc5974db1821353cc6f1b7c0120b3eb79f4fe60ad5498a12ee3b371cfe5506731110b37d8b116920de865c1e1903660684a"}, 0x82) r4 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) unshare(0x40000000) [ 474.692795][ T32] audit: type=1326 audit(1574086808.732:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x7ffc0000 [ 474.717274][ T32] audit: type=1326 audit(1574086808.732:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45a639 code=0x7ffc0000 [ 474.741102][ T32] audit: type=1326 audit(1574086808.732:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x7ffc0000 [ 474.765087][ T32] audit: type=1326 audit(1574086808.732:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x45a639 code=0x7ffc0000 [ 474.790012][ T32] audit: type=1326 audit(1574086808.732:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x7ffc0000 [ 474.814953][ T32] audit: type=1326 audit(1574086808.732:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45a639 code=0x7ffc0000 [ 474.841826][ T32] audit: type=1326 audit(1574086808.732:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x7ffc0000 [ 474.868679][ T32] audit: type=1326 audit(1574086808.732:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=46 compat=0 ip=0x45a639 code=0x7ffc0000 14:20:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 474.893346][ T32] audit: type=1326 audit(1574086808.732:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x7ffc0000 [ 474.917161][ T32] audit: type=1326 audit(1574086808.732:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45a639 code=0x7ffc0000 14:20:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x17, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0xfffffd58) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140), r1, 0x0, 0x0, 0x1}}, 0x20) 14:20:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x5, [0x3b, 0x0, 0x40000020], [0xc1]}) 14:20:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 14:20:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 475.155802][T18080] IPVS: ftp: loaded support on port[0] = 21 14:20:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17b}]}) 14:20:09 executing program 3: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x12e) r3 = dup2(r2, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000021ff4)) write$UHID_DESTROY(r3, &(0x7f0000000040), 0x4) 14:20:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x0, @vbi}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x2) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000005c0)={0x67446698, 0x0, 0x3, 0x0, 0x0, "446b9ac84f29bcfb606cd31ef0a682eafdb229c604ce9c2bfbc67951e89753a7c9742e183855563b1d9235e3bf51c7f88ea60e98c01cbad6d3b9348b7c56c7cd4bc5974db1821353cc6f1b7c0120b3eb79f4fe60ad5498a12ee3b371cfe5506731110b37d8b116920de865c1e1903660684a"}, 0x82) r4 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) unshare(0x40000000) 14:20:09 executing program 5: semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000280)={0x0, 0x989680}) 14:20:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 475.683531][T12501] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max 14:20:09 executing program 4: rename(0x0, &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, 0x0, 0x0) [ 475.789351][T12501] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [|yz1] on sz1 14:20:09 executing program 5: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000340)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) [ 475.867439][T18121] IPVS: ftp: loaded support on port[0] = 21 14:20:09 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000020003000a0002000a0ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) 14:20:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x40000000010) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r3, 0xc01}, 0x14}}, 0x0) 14:20:10 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000090000000000000000729ffb5dd36771f7b2bf00000400000037f6beb5887e090000000000"], 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 476.090802][T18138] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 476.100436][T18138] bridge_slave_0: FDB only supports static addresses 14:20:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:20:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x9baa78c2945d863f, 0x0) 14:20:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0xa, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 14:20:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:20:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x0, @vbi}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x2) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000005c0)={0x67446698, 0x0, 0x3, 0x0, 0x0, "446b9ac84f29bcfb606cd31ef0a682eafdb229c604ce9c2bfbc67951e89753a7c9742e183855563b1d9235e3bf51c7f88ea60e98c01cbad6d3b9348b7c56c7cd4bc5974db1821353cc6f1b7c0120b3eb79f4fe60ad5498a12ee3b371cfe5506731110b37d8b116920de865c1e1903660684a"}, 0x82) r4 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) unshare(0x40000000) [ 476.731110][T18161] kvm [18159]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000010f 14:20:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0xc0010203], [0xc1]}) 14:20:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100746266001400e4bfb40aa0866a8f00"/40], 0x40}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:20:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="860f4c0e57c99ca0ad78349f5803fd3a1a6d5cb848ca6b3a3206a6bc000023b3483f5492d0616e6600df2b1e1a85f73de44b"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/61, 0x15}], 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:20:10 executing program 5: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x32) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000000)) [ 477.149039][T18170] IPVS: ftp: loaded support on port[0] = 21 14:20:11 executing program 5: r0 = epoll_create(0x6) r1 = epoll_create(0x8) r2 = epoll_create(0x6) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000dff4)) r4 = epoll_create(0x46c) r5 = epoll_create(0x400000200) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000c7f000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000dff4)) r6 = epoll_create(0x400000200) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000c7f000)) 14:20:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x240900, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) [ 477.306425][ C0] net_ratelimit: 27 callbacks suppressed [ 477.306451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 477.319138][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:20:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCREATE(r3, &(0x7f0000000280)={0x18}, 0xffffffbe) 14:20:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f4000003020000c0170800000000000500200000000000004000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) [ 477.870910][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 477.877675][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 477.884355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 477.890930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 477.897946][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 477.904677][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 477.911365][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:20:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x100000001) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) [ 477.917992][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:20:12 executing program 5: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffffffffffff7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) dup2(r2, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000025c0)={0x40000010}) 14:20:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0x215}, 0x14}}, 0x0) 14:20:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 14:20:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x0, 0x0) 14:20:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001020101000000003f2c11b91e6143481000010004000100080002000000e100"], 0x24}}, 0x0) [ 478.499729][T18218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x586], [0xc1]}) [ 478.540939][T18220] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 14:20:12 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x240900, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) 14:20:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 14:20:12 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="2e0000001e000507ed0080647e6394f26731d2000500130111404b480f0001000080020000000300f88000f01700", 0x2e}], 0x1}, 0x0) 14:20:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) setreuid(r1, 0x0) 14:20:13 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) rt_sigsuspend(&(0x7f0000000300)={0x5}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 14:20:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100), 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x101, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) 14:20:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x6b) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r2, 0x0, 0x2, 0x4}}, 0xc2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {}, r2}}, 0x48) 14:20:13 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vet(\xff\xff\xff\xffB\x9f\xd9+\xdc\x01\x06\x1a', &(0x7f0000000040)=ANY=[@ANYBLOB="1d"]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x11, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 14:20:13 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0x1c) 14:20:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00', 0x1002}) io_setup(0x9, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x343, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xe}]) 14:20:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) open(0x0, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x2739cafec01f7d6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 14:20:13 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='fdinfo/3\x00') r1 = socket(0x800000000010, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x40001000000000ea) 14:20:13 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x240900, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) 14:20:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000008c0)="fc0000001a000700ab0925000900070002ab0700000000001d60369321000200ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030005000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 479.887666][T18276] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 479.896560][T18276] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 14:20:14 executing program 0: futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x4000000) 14:20:14 executing program 4: unshare(0x400) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00'}, 0x9) 14:20:15 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) rt_sigsuspend(&(0x7f0000000300)={0x5}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 14:20:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x240900, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) 14:20:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x90) 14:20:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000048, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000001c0)) 14:20:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff04000000090001007072696f00000000180002000d73f0385ca47c0c38e791f4c8"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) 14:20:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000048, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000001c0)) 14:20:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000048, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000001c0)) 14:20:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x9800, 0x0, 0x0, 0x8, 0x7, 0x1000000000000, 0x0, 0x200000}, [@exit]}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3a9) 14:20:16 executing program 3: add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="2d7bd498ae3f2e5222714d1e366fc173d26d1d42e7a3312648eb765f1a2d08ea23a9d76e7a41522b4904f57fdcc6a80e74cfe6d029b47de5aa20", 0x3a, 0xfffffffffffffffc) 14:20:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x14, &(0x7f0000000200)={@initdev={0x5, 0x1e, 0x0, 0x0}, @remote}, 0x3) 14:20:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) [ 482.536257][T18327] encrypted_key: master key parameter '' is invalid [ 482.570890][T18327] encrypted_key: master key parameter '' is invalid 14:20:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000048, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000001c0)) [ 483.545801][ C0] net_ratelimit: 26 callbacks suppressed [ 483.545816][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 483.558771][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 484.103485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 484.109999][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 484.117014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 484.123467][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 484.129803][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 484.136623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 484.143506][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:20:18 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) rt_sigsuspend(&(0x7f0000000300)={0x5}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 14:20:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, 0x0) 14:20:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 14:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x800}, @IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x40}}, 0x0) 14:20:18 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000180)={0x0, 0x0, "b0d82a3c4e4fe5509d95b7e6e2c6272e30f35871958ee67c66e0b143280f202a"}) 14:20:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x14, &(0x7f0000000200)={@initdev={0x5, 0x1e, 0x0, 0x0}, @remote}, 0x3) [ 484.149800][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:20:18 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa000000000100000008000000eceec8aa0ac7ecb0b5a08ad60a9e2d58caed9f65547d19a04bcc4be1b2e1aa73c7ff3b01e5bdb5798c630c3f7aca69c9443093872a340c52cecf5499029547db2bb4b704360bbf0346dbaf39a7077745c94e444bb631bc9811bc6a4a581a16eaf33454f67432827101598d430f21285e09193daea0b3a4323a0a1995705c343dcc06038b51d480fef3f18cbccc2830f0c24f78f1c6ca31b42f4a4afa991fbc030a581c70836eecaad7a2fc1d25f0e11704"], 0x14) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x51d, &(0x7f0000000100)={@local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 14:20:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080)) 14:20:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @broadcast}}, 0x1c) 14:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x800}, @IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x40}}, 0x0) 14:20:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x14, &(0x7f0000000200)={@initdev={0x5, 0x1e, 0x0, 0x0}, @remote}, 0x3) 14:20:18 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@flushpolicy={0x10, 0x1d, 0x7a3fef28efd94adf}, 0x10}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 14:20:19 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) rt_sigsuspend(&(0x7f0000000300)={0x5}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 14:20:19 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100b83afffe80034300050dff00000000000000ffff020000000000000000000000000001860090780007080060c5961e0001000003040000000000001803000005000001ff014000000000000000000000000001000c0000000000000738000000060c94000201000100000000000300000000000000050000000000000000000000010000002000000000000000090000000000000005028000c910fe8000000000000000000000000000bbc204000000000401"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80802, 0x0) write$sndseq(r2, &(0x7f0000000280)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) write$sndseq(r2, &(0x7f00000002c0)=[{0x81, 0x6, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x30) 14:20:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'\x04yz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\v\x00\x00\xfe\xff\xff\xff\x00\x00\x00\x00\x05\xbf\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r1, 0x0) dup2(r4, r0) 14:20:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x14, &(0x7f0000000200)={@initdev={0x5, 0x1e, 0x0, 0x0}, @remote}, 0x3) 14:20:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x800}, @IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x40}}, 0x0) 14:20:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x800}, @IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x40}}, 0x0) 14:20:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x24, 0x1a, 0x401, 0x0, 0x0, {}, [@RTA_MARK={0x8, 0x1d}]}, 0x24}}, 0x0) 14:20:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) 14:20:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000043c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)='}', 0x1}], 0x0, &(0x7f0000000880)=[@assoc={0x18}], 0x18}], 0x83, 0x0) [ 485.388115][T18400] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 485.455509][T18408] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 14:20:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=@dstopts, 0x8) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c) 14:20:19 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@flushpolicy={0x10, 0x1d, 0x7a3fef28efd94adf}, 0x10}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 14:20:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffe97, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}]}, 0x40}}, 0x0) 14:20:20 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x30008896, 0x0, 0x0) 14:20:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') preadv(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x200000000000) 14:20:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0800a1695e1dcfe87b1071") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x100000000004}, 0x10) write(r1, &(0x7f0000000140)="240000001a005f0014f9f407000909000a00800000000000000002000800020000000000", 0x24) 14:20:20 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 14:20:20 executing program 5: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000180)="6963e64243ea480b5de56946c568f95d22467104000000000000006f156c9c8a2ac4677b00000000000000000000e38a00f8e154da33000000000000000000000058", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040), 0x4) [ 486.090388][T18431] mmap: syz-executor.1 (18431) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 14:20:20 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = open(0x0, 0x0, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) creat(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x22, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000440)={[], 0x40, 0x0, 0x8001, 0x0, 0xfffffffffffffffc}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x9, 0x9, 0x7}, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffc000/0x3000)=nil) 14:20:20 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 14:20:20 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000300)=0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 14:20:20 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) 14:20:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getrandom(&(0x7f0000000100)=""/193, 0xc1, 0x0) 14:20:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@flushpolicy={0x10, 0x1d, 0x7a3fef28efd94adf}, 0x10}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 14:20:20 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 14:20:20 executing program 3: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x28040) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffdb}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000580)='ip6_vti1\x00') 14:20:20 executing program 2: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3, 0x1) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000002c0)=""/182) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x4c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x3c, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x100}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x8}, @IFLA_BR_MCAST_MLD_VERSION={0xffffffffffffffd8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0x8}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0x8}]}}}]}, 0x6c}}, 0x0) 14:20:20 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000004740)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0x0, @local, 0x9}, 0x80, 0x0}, 0xe803) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)='9', 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000036c0)="a5", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001140)="9f9025b320788266150ed588b66cd0dd770efee3df0eeff01d143e2389f276d82f99bdb1f7481621368993f568e513da6e80b184528701504efff7db040122b20f745cf1eb1bf22c5a1f1c5f85a26296e823ac629de5e615d16e99f1afbc45625ff0a05af9fc5e1e09216769781152170ac15e247dfcebf85f20ba7a785a71716ddfc2b46e03a55ca42e8da04f71f11198d73e86b69bdc17dbf9b224576ea5a31ecc9bffd0b5ee913c663a7192f2adddaa11f1b7bc78e08e85d96c5f937ea77d943d6f6b7a09fa95d85e7472998acb3ea08ff58ac1c257e21e538c34798fdd56e22244c3a7773a623e16373ee62033bf1e7e21da94d9e53373981ff346162b503e7d0a27217a4f32def89fa47f94a7c8585f78e56e319a9987f5c7af7e19767b3e4849c9ca7266f09d77f5de864e5ab35ff61628afa93c777ce552d172984b179bd6125bf4f7ef7f9993dfe6191c13590e2920cf59ed4e8f6ae0bfd6e0480d2d99bca526ca2c79f333c60c0a800616959e53aa46d05c7778068654bfd50aec1024ab8bcdc120c541bc0bd20329e874ff4b50cbb1172aae55629bb257c5f3d0b3ee0f40490427c326580217710e2b7a08595171bc34aeec83d796e1ca51ce75896e2886c30783bfc2825f98c10a1dd9ee36abfabb692e3834aa4c1b31230f08bbc2a6971a4a9e186ee568dfccc13a59f4cc5c331cfabb0a87addf6b5c78223bc17ff7b9106ee8f575ceb16c6fa884659f5952cd25277f770dd366081b30569396b57bf5d64b087dae3958e3a0eeecad93e9dfc7528e8cb11f2ed324e8fde030186fc96b00f75e7fffad1115f66aa6986c8fc5c6619a5c80921955cb08395680b2e933dd4147dc53649d3f687643b125853c979f8534b91c970872e996fcf6de452f5b05a18fe77ead019a7bbca5e9e45a91d52fdd55c3711341b3e6d7054c9b8473a841b7cc095708747ffa37fa2889b9d69b76de2eeb3d9494f1f3c72e548dd9f8f9ab6bb992cdf6a43eff5adba3e6c04bcd4c04c0f27c1ee23cda111c7c8e46cdf95f69bf0f8bdd6338ed6ba21420a193002c4eb527b6f368978c363a67de77c1675c04d2e94d47ede850fd4f26ffe5d370af75894f767b4f3a1100ed4f02faddc9bd482f22154f6c47d9a1a6fb953426aa05b798a2eb9b01c68d5d2fcb428fb62da26ecac9eef03565120a08309f4f9790a3ffdadc91f297cc045c0c95f7d6ea9aede8dbea8e5e8bb8f94a9de11fd91262194c72e175db5a65efe78fba2c64ce85606af79aaaba0ffe5070e457aa3e3b4584b54acb5ffa92546cee55f0008031a33124d444420aa7209900f418a5a9ae94779ba41b99c1e93355db80085622757cc13c0ba8de715ba1fc73cd44e92b2da2407cc8300ad47df8fed565c8b40a2cd69a0e2485343829b53f03f9917bd99799aa77946d64ed781590b25e73c80fb1d3493175794e0ef57f099b61b56f37c9332490b3bf6c25decfb2a2ccc5b06d0e5a34b7f94812f9dae7fc1c1dc73e39a5d78427776856bf9c8878fcb0afb757dabdc45055b011d104e1934f9788c00eebe94a9d2ad4509ccfa1c28b2c44f21f4750a011e7d0515fa972109dd1742dd256a3043cace172355029b8c0156852f861c493d42aa13077d45407396555f090ae343e05ddd33c4e164395d8eff7a9bad88e33e64e50156f1907a6457b13c9cb0c0ca74ad694ed5d9046f804cc8054d75b607228d25774cb8fdd8cd6bf77f880370152a9998da68d92b91501f6f6283fe7e44538f96aac8919873344cf6446dd0c6ef9b5a3bf4a2345e05bb3f0d1959975eb108c45509415ef81d9507681eb76d86c734d8adbe72c9faa23b2781cb30ee200e84737efef8f6830749fdd2380b51064de2a8e46b245fb3a5b5ef4a97567f435b4f81998ab0d0c32054143360245baf889f31b11d1504a58060b7a770ca4699017cde1170b296b91924541d00fcab3a41a485922faec9833b0", 0x57b}], 0x1}, 0x8000) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) 14:20:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000a00000000000000000000000800030000000000", 0x24) [ 486.697992][T18471] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 486.707154][T18471] netlink: 'syz-executor.2': attribute type 42 has an invalid length. [ 486.716213][T18471] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 14:20:20 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 14:20:20 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c) shutdown(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) 14:20:21 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 14:20:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60, {0x0, 0x989680}}) 14:20:21 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c) shutdown(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) 14:20:21 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x121002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040), 0xa) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 14:20:21 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@flushpolicy={0x10, 0x1d, 0x7a3fef28efd94adf}, 0x10}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 14:20:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$alg(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x3}], 0x18}], 0x2a, 0x0) 14:20:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 14:20:21 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c) shutdown(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) 14:20:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x10, 0xffffffffffffffff, 0x0, 0x5}, 0x3c) 14:20:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuactat\x00\x00\x00\x00\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0xff}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f0000000440)='TRUE', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000480)={{0x6134e6ad}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffa}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:20:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$alg(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x3}], 0x18}], 0x2a, 0x0) 14:20:21 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c) shutdown(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) 14:20:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000140)={r2, 0x53, "2ae2379e39c03b57ebe249cc3acb157982a561dc0dda6d3e445596db04d5cdb321620780721f5e0fdb45bbee6a6649d7df6746734d372bb111a41849d1db55c9227b77b112393c308bd769b458db541c40b69a"}, &(0x7f00000001c0)=0x5b) 14:20:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$alg(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x3}], 0x18}], 0x2a, 0x0) 14:20:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000140)={r2, 0x53, "2ae2379e39c03b57ebe249cc3acb157982a561dc0dda6d3e445596db04d5cdb321620780721f5e0fdb45bbee6a6649d7df6746734d372bb111a41849d1db55c9227b77b112393c308bd769b458db541c40b69a"}, &(0x7f00000001c0)=0x5b) 14:20:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$alg(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x3}], 0x18}], 0x2a, 0x0) 14:20:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000140)={r2, 0x53, "2ae2379e39c03b57ebe249cc3acb157982a561dc0dda6d3e445596db04d5cdb321620780721f5e0fdb45bbee6a6649d7df6746734d372bb111a41849d1db55c9227b77b112393c308bd769b458db541c40b69a"}, &(0x7f00000001c0)=0x5b) 14:20:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 14:20:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r2}}, 0x1b5) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)) mq_timedreceive(r3, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) 14:20:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r2}}, 0x1b5) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)) mq_timedreceive(r3, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) 14:20:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r2}}, 0x1b5) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)) mq_timedreceive(r3, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) 14:20:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) 14:20:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r2}}, 0x1b5) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)) clock_gettime(0x2, &(0x7f0000000000)) 14:20:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r2}}, 0x1b5) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) clock_gettime(0x2, &(0x7f0000000000)) 14:20:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) 14:20:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r2}}, 0x1b5) clock_gettime(0x2, &(0x7f0000000000)) 14:20:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) clock_gettime(0x2, &(0x7f0000000000)) 14:20:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) dup3(r4, r5, 0x0) 14:20:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000000)) 14:20:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) clock_gettime(0x2, &(0x7f0000000000)) 14:20:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) clock_gettime(0x2, &(0x7f0000000000)) 14:20:23 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)) clock_gettime(0x2, &(0x7f0000000000)) 14:20:23 executing program 3: clock_gettime(0x2, &(0x7f0000000000)) 14:20:23 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) 14:20:23 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) 14:20:23 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) 14:20:23 executing program 3: clock_gettime(0x2, 0x0) [ 489.784846][ C0] net_ratelimit: 26 callbacks suppressed [ 489.784870][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 489.796926][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:20:23 executing program 3: clock_gettime(0x2, 0x0) 14:20:23 executing program 3: clock_gettime(0x2, 0x0) 14:20:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) dup3(r4, r5, 0x0) [ 490.343338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.349714][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.356042][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.362413][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.369318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.375447][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.381545][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.388052][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:20:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) dup3(r4, r5, 0x0) 14:20:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) shutdown(0xffffffffffffffff, 0x0) 14:20:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) shutdown(0xffffffffffffffff, 0x0) 14:20:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r2}}, 0x1b5) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)) mq_timedreceive(r3, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) 14:20:27 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='environ\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r6) sendfile(r6, r4, &(0x7f0000000040)=0x9, 0xffffffffffffffff) fchdir(r5) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r5, 0x400000004, 0x8, 0x6, 0x100000000005}) mq_timedreceive(r4, 0x0, 0x0, 0x0, 0x0) 14:20:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x200f4, 0x0, 0x0, 0x2000, &(0x7f0000010000/0x2000)=nil}) 14:20:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e, 0x0, 0x82a}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:20:27 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 14:20:27 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='environ\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r6) sendfile(r6, r4, &(0x7f0000000040)=0x9, 0xffffffffffffffff) fchdir(r5) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r5, 0x400000004, 0x8, 0x6, 0x100000000005}) mq_timedreceive(r4, 0x0, 0x0, 0x0, 0x0) [ 493.695632][T18666] picdev_read: 53 callbacks suppressed [ 493.695647][T18666] kvm: pic: non byte read [ 493.726669][T18666] picdev_write: 53 callbacks suppressed [ 493.726683][T18666] kvm: pic: non byte write 14:20:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x22}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48) 14:20:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r4, 0x1) shutdown(0xffffffffffffffff, 0x0) [ 493.757062][T18666] kvm: pic: non byte read [ 493.769427][T18666] kvm: pic: non byte write [ 493.779739][T18666] kvm: pic: non byte read [ 493.817437][T18666] kvm: pic: non byte write [ 493.827110][T18666] kvm: pic: non byte read [ 493.838441][T18666] kvm: pic: non byte write [ 493.853878][T18666] kvm: pic: non byte read [ 493.859205][T18666] kvm: pic: non byte write [ 493.867037][T18666] kvm: pic: non byte read [ 493.872106][T18666] kvm: pic: non byte write [ 493.877981][T18666] kvm: pic: non byte read [ 493.884137][T18666] kvm: pic: non byte write [ 493.889682][T18666] kvm: pic: non byte read [ 493.898711][T18666] kvm: pic: non byte write [ 493.918131][T18666] kvm: pic: non byte read 14:20:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c9599161a004000030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 14:20:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000008c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000004}) [ 493.938742][T18666] kvm: pic: non byte write [ 494.007691][T18666] kvm: pic: non byte read [ 494.037237][T18666] kvm: pic: non byte write 14:20:28 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='environ\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r6) sendfile(r6, r4, &(0x7f0000000040)=0x9, 0xffffffffffffffff) fchdir(r5) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r5, 0x400000004, 0x8, 0x6, 0x100000000005}) mq_timedreceive(r4, 0x0, 0x0, 0x0, 0x0) 14:20:28 executing program 0: mlockall(0x2) r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000fed000/0x4000)=nil, 0x4000) 14:20:28 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='environ\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r6) sendfile(r6, r4, &(0x7f0000000040)=0x9, 0xffffffffffffffff) fchdir(r5) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r5, 0x400000004, 0x8, 0x6, 0x100000000005}) 14:20:28 executing program 3: r0 = socket(0x10, 0x400000000080803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2}}], 0x663, 0x2, 0x0) 14:20:28 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='environ\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r6) sendfile(r6, r4, &(0x7f0000000040)=0x9, 0xffffffffffffffff) fchdir(r5) 14:20:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0xaf}) 14:20:28 executing program 1: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 14:20:28 executing program 2: unshare(0x400) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 14:20:28 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='environ\x00') syz_open_procfs(0x0, &(0x7f0000000240)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r5) sendfile(r5, r4, &(0x7f0000000040)=0x9, 0xffffffffffffffff) 14:20:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) 14:20:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xa, 0x0, "72ff9ddf1a7ef836841b22e5dac88fb9d0a0d118f7aca5e606d4dd00"}) 14:20:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) write$binfmt_script(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00\x00'], 0x8) 14:20:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r0) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x14}, 0x0) recvmmsg(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 14:20:29 executing program 0: r0 = socket$inet6(0xa, 0x2000000080803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 14:20:29 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='environ\x00') syz_open_procfs(0x0, &(0x7f0000000240)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)) sendfile(r5, r4, &(0x7f0000000040)=0x9, 0xffffffffffffffff) 14:20:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x0, 0x100000}}]}) 14:20:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xb5, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}}, &(0x7f0000003ff6)='G\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:20:29 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='environ\x00') syz_open_procfs(0x0, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r4, &(0x7f0000000040)=0x9, 0xffffffffffffffff) 14:20:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff60, 0x0}, 0xc100) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="76d506239de63306c6fa", 0xa}, {&(0x7f0000000100)="32f575474051", 0x6}], 0x2) 14:20:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="6337a57571362c", 0x7}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006386dd6f"], 0xfdef) 14:20:29 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='environ\x00') sendfile(0xffffffffffffffff, r4, &(0x7f0000000040)=0x9, 0xffffffffffffffff) [ 495.446313][T18759] device nr0 entered promiscuous mode [ 495.749256][T18765] device nr0 entered promiscuous mode 14:20:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) 14:20:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x4b, 0x2e}}) 14:20:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000101010000609fbc609d30e2d215434806001200040001000400020004000180"], 0x24}}, 0x0) 14:20:30 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x9, 0xffffffffffffffff) 14:20:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000080), 0x492492492492751, 0x0) 14:20:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 496.025589][ C0] net_ratelimit: 26 callbacks suppressed [ 496.025614][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 496.038238][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:20:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "ffffffffffffffff"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)="14", 0x200007c1}], 0x1}, 0x0) 14:20:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 14:20:30 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x9, 0xffffffffffffffff) 14:20:30 executing program 3: clock_getres(0xe, 0x0) 14:20:30 executing program 0: r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) 14:20:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 496.583512][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.589985][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 496.596682][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.603075][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 496.609700][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.615996][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 496.622416][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.628676][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:20:30 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x9, 0xffffffffffffffff) 14:20:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x0, @rand_addr="db30aae6121fbb1c641b290ded9975f3", 0xfffffffd}}, 0x80, 0x6}, 0xffffffffffffff25) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/38) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) r6 = dup3(r4, r5, 0x0) shutdown(r6, 0x0) 14:20:30 executing program 3: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc0bc5310, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 14:20:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 14:20:31 executing program 0: r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) 14:20:31 executing program 4: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x40001}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') sendfile(0xffffffffffffffff, r3, &(0x7f0000000040)=0x9, 0xffffffffffffffff) [ 497.281557][T18823] ===================================================== [ 497.288712][T18823] BUG: KMSAN: uninit-value in gf128mul_4k_lle+0x1fb/0x2b0 [ 497.295884][T18823] CPU: 0 PID: 18823 Comm: syz-executor.1 Not tainted 5.4.0-rc5+ #0 [ 497.303785][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.313857][T18823] Call Trace: [ 497.317279][T18823] dump_stack+0x191/0x1f0 [ 497.321771][T18823] kmsan_report+0x128/0x220 [ 497.326318][T18823] __msan_warning+0x73/0xe0 [ 497.330860][T18823] gf128mul_4k_lle+0x1fb/0x2b0 [ 497.335745][T18823] ghash_update+0x9db/0x1130 [ 497.340375][T18823] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 497.346591][T18823] ? ghash_init+0x50/0x50 [ 497.351050][T18823] shash_ahash_update+0x53a/0x650 [ 497.356255][T18823] ? kmsan_internal_set_origin+0x6a/0xb0 [ 497.362034][T18823] shash_async_update+0x50/0x60 [ 497.366905][T18823] ? shash_async_init+0x1e0/0x1e0 [ 497.372247][T18823] gcm_hash+0x15d8/0x2400 [ 497.376641][T18823] crypto_gcm_encrypt+0x710/0x9e0 [ 497.381696][T18823] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 497.387346][T18823] crypto_aead_encrypt+0xf2/0x180 [ 497.392446][T18823] tls_push_record+0x341e/0x4e50 [ 497.397443][T18823] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 497.403404][T18823] bpf_exec_tx_verdict+0x1454/0x1c80 [ 497.408801][T18823] ? get_user_pages_fast+0x69b/0x6e0 [ 497.414111][T18823] ? kmsan_get_metadata+0x39/0x350 [ 497.419332][T18823] tls_sw_sendmsg+0x158d/0x2710 [ 497.424291][T18823] ? udpv6_rcv+0x70/0x70 [ 497.428559][T18823] ? tls_tx_records+0xb40/0xb40 [ 497.434046][T18823] inet6_sendmsg+0x2d8/0x2e0 [ 497.438705][T18823] ___sys_sendmsg+0xe89/0x1590 [ 497.443533][T18823] ? __fget_light+0x6b1/0x710 [ 497.448206][T18823] ? kmsan_internal_set_origin+0x6a/0xb0 [ 497.453855][T18823] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 497.459744][T18823] __se_sys_sendmsg+0x305/0x460 [ 497.464598][T18823] __x64_sys_sendmsg+0x4a/0x70 [ 497.469552][T18823] do_syscall_64+0xb6/0x160 [ 497.474063][T18823] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 497.479944][T18823] RIP: 0033:0x45a639 [ 497.483832][T18823] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 497.503424][T18823] RSP: 002b:00007f656c607c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.511826][T18823] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 497.519784][T18823] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 497.527745][T18823] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 497.535795][T18823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f656c6086d4 [ 497.543757][T18823] R13: 00000000004c8bce R14: 00000000004df1f8 R15: 00000000ffffffff [ 497.551836][T18823] [ 497.554238][T18823] Uninit was stored to memory at: [ 497.559261][T18823] kmsan_internal_chain_origin+0xbd/0x180 [ 497.565009][T18823] __msan_chain_origin+0x6b/0xd0 [ 497.570032][T18823] ghash_update+0xa83/0x1130 [ 497.574715][T18823] shash_ahash_update+0x53a/0x650 [ 497.579727][T18823] shash_async_update+0x50/0x60 [ 497.584566][T18823] gcm_hash+0x15d8/0x2400 [ 497.588893][T18823] crypto_gcm_encrypt+0x710/0x9e0 [ 497.593907][T18823] crypto_aead_encrypt+0xf2/0x180 [ 497.600226][T18823] tls_push_record+0x341e/0x4e50 [ 497.605243][T18823] bpf_exec_tx_verdict+0x1454/0x1c80 [ 497.610515][T18823] tls_sw_sendmsg+0x158d/0x2710 [ 497.615372][T18823] inet6_sendmsg+0x2d8/0x2e0 [ 497.619949][T18823] ___sys_sendmsg+0xe89/0x1590 [ 497.624702][T18823] __se_sys_sendmsg+0x305/0x460 [ 497.629561][T18823] __x64_sys_sendmsg+0x4a/0x70 [ 497.634314][T18823] do_syscall_64+0xb6/0x160 [ 497.638810][T18823] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 497.644684][T18823] [ 497.646996][T18823] Uninit was stored to memory at: [ 497.652009][T18823] kmsan_internal_chain_origin+0xbd/0x180 [ 497.657801][T18823] __msan_chain_origin+0x6b/0xd0 [ 497.662834][T18823] __crypto_xor+0x1e8/0x1470 [ 497.667417][T18823] crypto_ctr_crypt+0x613/0xaf0 [ 497.672255][T18823] crypto_skcipher_encrypt+0xd2/0x150 [ 497.677617][T18823] crypto_gcm_encrypt+0x4a5/0x9e0 [ 497.682637][T18823] crypto_aead_encrypt+0xf2/0x180 [ 497.687739][T18823] tls_push_record+0x341e/0x4e50 [ 497.692667][T18823] bpf_exec_tx_verdict+0x1454/0x1c80 [ 497.697965][T18823] tls_sw_sendmsg+0x158d/0x2710 [ 497.702812][T18823] inet6_sendmsg+0x2d8/0x2e0 [ 497.707400][T18823] ___sys_sendmsg+0xe89/0x1590 [ 497.712153][T18823] __se_sys_sendmsg+0x305/0x460 [ 497.716998][T18823] __x64_sys_sendmsg+0x4a/0x70 [ 497.721748][T18823] do_syscall_64+0xb6/0x160 [ 497.726239][T18823] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 497.732110][T18823] [ 497.734423][T18823] Uninit was created at: [ 497.738654][T18823] kmsan_save_stack_with_flags+0x3f/0x90 [ 497.744273][T18823] kmsan_alloc_page+0x153/0x360 [ 497.749249][T18823] __alloc_pages_nodemask+0x149d/0x60c0 [ 497.754783][T18823] alloc_pages_current+0x68d/0x9a0 [ 497.759887][T18823] skb_page_frag_refill+0x2b0/0x580 [ 497.765073][T18823] sk_page_frag_refill+0xa4/0x330 [ 497.770263][T18823] sk_msg_alloc+0x203/0x1050 [ 497.774932][T18823] tls_sw_sendmsg+0xb56/0x2710 [ 497.779683][T18823] inet6_sendmsg+0x2d8/0x2e0 [ 497.784263][T18823] ___sys_sendmsg+0xe89/0x1590 [ 497.789018][T18823] __se_sys_sendmsg+0x305/0x460 [ 497.793868][T18823] __x64_sys_sendmsg+0x4a/0x70 [ 497.798668][T18823] do_syscall_64+0xb6/0x160 [ 497.803177][T18823] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 497.809052][T18823] ===================================================== [ 497.815981][T18823] Disabling lock debugging due to kernel taint [ 497.822269][T18823] Kernel panic - not syncing: panic_on_warn set ... [ 497.828957][T18823] CPU: 0 PID: 18823 Comm: syz-executor.1 Tainted: G B 5.4.0-rc5+ #0 [ 497.838316][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.848418][T18823] Call Trace: [ 497.851727][T18823] dump_stack+0x191/0x1f0 [ 497.856131][T18823] panic+0x3c9/0xc1e [ 497.860046][T18823] kmsan_report+0x215/0x220 [ 497.864550][T18823] __msan_warning+0x73/0xe0 [ 497.869050][T18823] gf128mul_4k_lle+0x1fb/0x2b0 [ 497.873816][T18823] ghash_update+0x9db/0x1130 [ 497.878504][T18823] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 497.884713][T18823] ? ghash_init+0x50/0x50 [ 497.889051][T18823] shash_ahash_update+0x53a/0x650 [ 497.894093][T18823] ? kmsan_internal_set_origin+0x6a/0xb0 [ 497.899732][T18823] shash_async_update+0x50/0x60 [ 497.904573][T18823] ? shash_async_init+0x1e0/0x1e0 [ 497.909588][T18823] gcm_hash+0x15d8/0x2400 [ 497.913915][T18823] crypto_gcm_encrypt+0x710/0x9e0 [ 497.919115][T18823] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 497.924484][T18823] crypto_aead_encrypt+0xf2/0x180 [ 497.929511][T18823] tls_push_record+0x341e/0x4e50 [ 497.934474][T18823] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 497.940363][T18823] bpf_exec_tx_verdict+0x1454/0x1c80 [ 497.945648][T18823] ? get_user_pages_fast+0x69b/0x6e0 [ 497.950936][T18823] ? kmsan_get_metadata+0x39/0x350 [ 497.956102][T18823] tls_sw_sendmsg+0x158d/0x2710 [ 497.960993][T18823] ? udpv6_rcv+0x70/0x70 [ 497.965225][T18823] ? tls_tx_records+0xb40/0xb40 [ 497.970152][T18823] inet6_sendmsg+0x2d8/0x2e0 [ 497.974743][T18823] ___sys_sendmsg+0xe89/0x1590 [ 497.980401][T18823] ? __fget_light+0x6b1/0x710 [ 497.985069][T18823] ? kmsan_internal_set_origin+0x6a/0xb0 [ 497.990710][T18823] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 497.996596][T18823] __se_sys_sendmsg+0x305/0x460 [ 498.001453][T18823] __x64_sys_sendmsg+0x4a/0x70 [ 498.006331][T18823] do_syscall_64+0xb6/0x160 [ 498.010845][T18823] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 498.016729][T18823] RIP: 0033:0x45a639 [ 498.020616][T18823] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 498.040385][T18823] RSP: 002b:00007f656c607c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.048824][T18823] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 498.056800][T18823] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 498.064779][T18823] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 498.072830][T18823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f656c6086d4 [ 498.080921][T18823] R13: 00000000004c8bce R14: 00000000004df1f8 R15: 00000000ffffffff [ 498.090743][T18823] Kernel Offset: disabled [ 498.095340][T18823] Rebooting in 86400 seconds..