cer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r9, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000180)={r11}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000040)={r11, 0xc5, "81f7c406556d7a18ef2458473c359116c60a213876fbf4933d27b5ae9713f138263334c3b7f37e65a8f3a50571b97fc513db09c8837a77cf47d982558c6191f7e0163d3e88db14e92f0ae7791cb290b5ad14e9c7b406003ff50bc69571893966e03b0810609ba401c3ce05d7e15bc8f1357e1928d5bd675fb5608ffe33055bcaa87cb14978efc5f7c52d3bc6a5c71634af866155994c09eacb580cd2ae9e3806be34345b08c8c4b55c8cf0b770fd1993cadfe14ab326f00fa2490b0dcd18f3de7b3af44a13"}, &(0x7f0000000140)=0xcd) 22:08:40 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500fffffff000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 22:08:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1b, 0x106d, 0x40}, [{}]}, 0x78) 22:08:41 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0xb00, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 304.430186][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) 22:08:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x26, 0x106d, 0x40}, [{}]}, 0x78) 22:08:41 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000007ffff00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:41 executing program 5: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0xb00, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:41 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r9, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000180)={r11}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000040)={r11, 0xc5, "81f7c406556d7a18ef2458473c359116c60a213876fbf4933d27b5ae9713f138263334c3b7f37e65a8f3a50571b97fc513db09c8837a77cf47d982558c6191f7e0163d3e88db14e92f0ae7791cb290b5ad14e9c7b406003ff50bc69571893966e03b0810609ba401c3ce05d7e15bc8f1357e1928d5bd675fb5608ffe33055bcaa87cb14978efc5f7c52d3bc6a5c71634af866155994c09eacb580cd2ae9e3806be34345b08c8c4b55c8cf0b770fd1993cadfe14ab326f00fa2490b0dcd18f3de7b3af44a13"}, &(0x7f0000000140)=0xcd) 22:08:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 22:08:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x27, 0x106d, 0x40}, [{}]}, 0x78) 22:08:41 executing program 5: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0xb00, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 304.798043][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:41 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000f0ffff00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 22:08:41 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r9, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000180)={r11}, &(0x7f00000001c0)=0x10) 22:08:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x30, 0x106d, 0x40}, [{}]}, 0x78) 22:08:41 executing program 5: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0xb00, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:41 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05007fffffff00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) [ 305.104750][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 22:08:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x31, 0x106d, 0x40}, [{}]}, 0x78) 22:08:41 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r9, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000180)={r11}, &(0x7f00000001c0)=0x10) 22:08:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 22:08:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 22:08:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x3e, 0x106d, 0x40}, [{}]}, 0x78) 22:08:42 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05009effffff00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 305.393528][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 22:08:42 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r8, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 22:08:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x180, 0x106d, 0x40}, [{}]}, 0x78) 22:08:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 22:08:42 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500f0ffffff00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 305.707282][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0xb00, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x300, 0x106d, 0x40}, [{}]}, 0x78) 22:08:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 22:08:42 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r8, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0xb00, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:42 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000002000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x500, 0x106d, 0x40}, [{}]}, 0x78) 22:08:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) [ 306.006862][T16285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0xb00, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x700, 0x106d, 0x40}, [{}]}, 0x78) 22:08:42 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r8, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 22:08:42 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000003000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x900, 0x106d, 0x40}, [{}]}, 0x78) [ 306.315709][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 22:08:43 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r7, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) 22:08:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 306.636040][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x922, 0x106d, 0x40}, [{}]}, 0x78) 22:08:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 22:08:43 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000004000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:43 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r7, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) [ 306.875603][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xa00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) 22:08:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:43 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r7, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) 22:08:43 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000008000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}) 22:08:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xb00, 0x106d, 0x40}, [{}]}, 0x78) [ 307.130108][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:43 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3effffff}) 22:08:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xc00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000e000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 307.497091][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 22:08:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xd00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{0x0}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000060000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:44 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{0x0}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 22:08:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xe00, 0x106d, 0x40}, [{}]}, 0x78) [ 307.836999][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}) 22:08:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{0x0}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000f0000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:44 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xf00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 308.155759][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1500, 0x106d, 0x40}, [{}]}, 0x78) 22:08:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000041010000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 22:08:44 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1600, 0x106d, 0x40}, [{}]}, 0x78) [ 308.507356][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:45 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000030000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 22:08:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1700, 0x106d, 0x40}, [{}]}, 0x78) 22:08:45 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:45 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x800, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xffff}, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r9, 0x29, 0x0, 0x4, 0x2, 0x10, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000180)={r11}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000040)={r11, 0xc5, "81f7c406556d7a18ef2458473c359116c60a213876fbf4933d27b5ae9713f138263334c3b7f37e65a8f3a50571b97fc513db09c8837a77cf47d982558c6191f7e0163d3e88db14e92f0ae7791cb290b5ad14e9c7b406003ff50bc69571893966e03b0810609ba401c3ce05d7e15bc8f1357e1928d5bd675fb5608ffe33055bcaa87cb14978efc5f7c52d3bc6a5c71634af866155994c09eacb580cd2ae9e3806be34345b08c8c4b55c8cf0b770fd1993cadfe14ab326f00fa2490b0dcd18f3de7b3af44a13"}, &(0x7f0000000140)=0xcd) 22:08:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 22:08:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1800, 0x106d, 0x40}, [{}]}, 0x78) 22:08:45 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000000e0000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 308.857738][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 308.887648][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1900, 0x106d, 0x40}, [{}]}, 0x78) 22:08:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3e}) 22:08:45 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:45 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000c00e0000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) [ 309.172519][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1a00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:45 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 22:08:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:46 executing program 1: r0 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x8000, 0x42, 0x12}, 0x18) signalfd(r0, &(0x7f0000000340)={[0x40, 0x1]}, 0x8) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r3, r4) 22:08:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1b00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:46 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="a84000000000000000000d000000fcc33580f680d6ef0cbdbfbc3b000011fdde30fdd6537240f5cca86199e1208ecdbeab324e125c6c2a"], 0x14}}, 0x0) 22:08:46 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000001f0000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 309.495805][T16457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 22:08:46 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1f00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:46 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000003f0000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:46 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000eb22d97336e4f5b21d9d62d89bcb9c478d699e2c976f90a6cfb6d9d815f6ab04b471aa28e939518018d55969d4c944160fbdca5805280e485017d741e7bad3d81e94fb9a7d6fc77f3b7cc8a8383a70486497c8644a8a09c70529426e7b04c6f5fde36e11e6144c973e03186bf9238641e56e5b4176", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:08:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:46 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x2000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:46 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3}) keyctl$revoke(0x3, r2) 22:08:46 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000001410000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 22:08:46 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00fe8f731583000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25200000000c0099001d9a0000020000000c0099003f00000003000000080001000000000008000100030000000c0099000100000000000000"], 0x48}}, 0x20001) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x2209, 0x106d, 0x40}, [{}]}, 0x78) 22:08:46 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) gettid() openat$udambuf(0xffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x2200, 0x0) recvmsg$qrtr(r2, &(0x7f0000001840)={&(0x7f0000000180), 0xc, &(0x7f00000016c0)=[{&(0x7f00000001c0)=""/179, 0xb3}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/213, 0xd5}, {&(0x7f0000001380)=""/142, 0x8e}, {&(0x7f0000001440)=""/247, 0xf7}, {&(0x7f0000001540)=""/109, 0x6d}, {&(0x7f00000015c0)=""/221, 0xdd}], 0x7, &(0x7f0000001700)=[{0xc0, 0x0, 0x0, ""/177}, {0x54, 0x0, 0x0, ""/72}], 0x114, 0x10122}, 0x1c, 0x2142) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:46 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000d0410000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:46 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x8154000) 22:08:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 22:08:46 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x2600, 0x106d, 0x40}, [{}]}, 0x78) 22:08:46 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYRES32=r2], 0x14}}, 0x40890) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) 22:08:46 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x8154000) 22:08:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 22:08:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x2700, 0x106d, 0x40}, [{}]}, 0x78) 22:08:47 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000600000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:47 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:47 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x8154000) 22:08:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 22:08:47 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) 22:08:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x3000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 22:08:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x3100, 0x106d, 0x40}, [{}]}, 0x78) 22:08:47 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:47 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000ec00000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:47 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00000000000000000000000000002bbaae8f7b345cfb5e3c018bd4e5ada9865ea8aed26ff681227555487c95cfb8c5ddadd4855a4e095f862c8cf817d8cfccbbed98e80bb905c4eee03f49f4823076d07b"], 0x14}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) io_submit(0x0, 0x6, &(0x7f0000000740)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000000180)="d342e363f45034dbb8b87c3cf273b6e9b0d1c120238e5f2f9340674cba2fc1467ed5ba615c454ce3766ff60b7dfcd51d4d1bd83477d08ba40602b0378ce1faffe54f39a6a8cf86b34467e71e35dc2199123f64c360a0dd70ccd974312dd084d612472a07e552eb89bd69e046314fc9a7777a7f68e392de0a2f528f4bdefccd84ceadaf5179", 0x85, 0x800, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x68, 0xffffffffffffffff, &(0x7f0000000240)="6f22d7d40556a1cf33de743d33764866ac8ada30489188b6225a8fd9e8e71c9e86b383772fa0f70f9b942874266c477e10499fb0685b65641ed6ef91f2a8106964bc014e3c2c9c22774d45bc7fbb9c049da3ef7a91498cac2e8b4cf4361bc1f929e76be17655e468c55fcaa2da7c0a4359f21a4e149d9a51b6b0c1a09371a50809589182b99e815eb3150944ce1529209e386d23579cc1754956efd59bfd64ddb70e3e51e19755f79adfc5c0d4df28340445148a6ef261a1b0b5089132f69d45a97262bddfa08b211dfead", 0xcb, 0x6, 0x0, 0x2, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f0000000380)="6d803543f1fc5034083944501dca6e8e57e22db3c6951a5c2327b7e6940412d101d4e5c2535e0f886bc77d751efa260c2ad8aeb26d727b7b400e26fee53ccd5429ccefc9abdf58dafb3bf960e3842c413990aadccaf43ce9475b2a5e53379acc3c9ebb95e833b80573c169b59ebf03bd54303ced5be291a8abd1bc58f02fe5d9575fe407e633db527a9b330e18499719d8c4d14f0eabc0db003cbc418b0d38101d41a480a70e04a171e59de97eadc1241d74911ff37bffcb589b0c6ee3962f6b4eafee40bb9cf7392c9b0c65e58f1722b6786d8f2e8bc49a273049a94f80aaa7adfb562e59", 0xe5, 0x6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f00000004c0)="e7d1882a803072b4785e3779df03", 0xe, 0x3, 0x0, 0x0, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x75, r0, &(0x7f0000000540)="ac4ba0fc0cc68c03684a70fb6a49c01d7150294ad40c12a2d546e9674ae0966af88842ee8cde9645c8dd39b98a854849727a0a9cf6e2a806584ebb830d13995a2eb50c3c65b5533e325518797233e7a847c2689f4216b9aa26f90e68eaf80f1924e05341a2de9cbd3754f60c831347e815", 0x71, 0x7f, 0x0, 0x1, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0xffff, r0, &(0x7f0000000600)="c0a0d51592527e3cc99673c605db4e54f0674b57961c771bd860728fc56153e930e7d9234d236e4f41c0fe0a8cf1e18494417e16628307d23c71f43a2ff4c1bec89b1abe054b8ec4404f7a9ef0ea0700846babad26c8e7f2c87acbb6981222400d4fe9f6a552f904aec23d42963009010f2d665e51671802d4188836e0f0ea0daa6ff19d2eb519e11b0f90a93fef0e1b56398ade868e9c16b96d48edbbc10f592cf1b410f144c0964a8a8ed695e43a0cec56f50e21f4ac12cf7d8b366499ae03f652ff0f1d397f700385e4172ec7416cbd17f22db6ea65d4172418a0dc909a2de61d31dd", 0xe4, 0x10000, 0x0, 0x2, r6}]) 22:08:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:08:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x3e00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:47 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140400007d2879988da9d7200e9b58dc92e3a57603f36b758a35aa618a9dc645f14f3331c76c3cacf6365a49e8bd7e17cfe40710d773a3567747f1bdc21667a049c5435f3bd37ae2ce30850da12e6001daee9da4d852a63b396484fb31fb5c9120fdb17a1df1e3a3274824f58248605142a9bba0cce5ad86cb16b1c9256ae72b6b7b083d31e3012a22c5986af4be8d3213f73ce72c11efe733f2b3c8d5f256956b484ef8eaa7a101b8c485f31386d03ed544811066dce0cf359ca38ee5", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000001c0)) 22:08:47 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 22:08:47 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000041d00000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x3f00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 22:08:47 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="03a2ade6148c3a51ac9c8d8f0b00000000000000000d000000"], 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r3 = socket$caif_stream(0x25, 0x1, 0x2) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x46c7e9c6a32b3fd5, 0x0, 0xfffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xf, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_bfifo={{0xa, 0x1, 'bfifo\x00'}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x4000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00') r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000000000000000000081b1b18f35e0590c423f157ca7e8b13a9d64215901303ce1bebbd15855d5d72e69eca05a6b9137ea3c11ce886e70ba41c245930f69c396688c71566709ab26f05645262e44dbd9e34bf392375e9779b4a0c2dc1d0c2ec807f02d5cde31853c753702ad2b4701d75f66f284aa894255f5", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000009000100706c756700000000030002000000000000000000"], 0x3c}}, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x54, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080d1}, 0x0) 22:08:47 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x7f00, 0x106d, 0x40}, [{}]}, 0x78) 22:08:48 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000f00000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 22:08:48 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:48 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8}, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:48 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000400300683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) 22:08:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1800000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:48 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000e643eceec290f300", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) recvmsg$can_raw(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/204, 0xcc}], 0x6, &(0x7f0000000540)=""/92, 0x5c}, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000040)) 22:08:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:48 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 22:08:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x2000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:48 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000ffff0700683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:48 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 22:08:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x3000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:48 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000034000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x4000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 22:08:49 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:49 executing program 1: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:49 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000fffff000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) [ 312.883143][T16691] __nla_validate_parse: 11 callbacks suppressed [ 312.883154][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:49 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x5000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:49 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000001683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 22:08:49 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200), 0x8) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="f40ed0cf99ca1d1dcec757c35a688f2f5b4bc9839f", 0x15, 0x1}) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000040)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b0000f7ff000000000d0000006a1f31312142ab21fa163daa1348fbbf0ec9f2d70454393acb77b675f35f238127f2e252ccae572119fc8ee757a27019baa2b176eebf0ebe631bb85296c27b887e74353f00669d04db37b95a5c57682520d941bac86c872ecefec77fce335fdc377ed0c6d3"], 0x14}}, 0x0) 22:08:49 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x7000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCVHANGUP(r0, 0x541b, 0x8154000) 22:08:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) [ 313.271319][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:49 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2e5d, 0x20002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x2403, 0x0) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f0000000380)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f28046f762335d0f16f80ecdcd694c8fe072e66a21b781854c9680d041174e06e07cc0b62a0aecce54b4bcdd11826b916aa296ec6ce50ba0af15db0089636a9c226d45137ea264957f58af3f68cda5eb6d5fc7a52b425f32d767629392853d7a21dcab092a0636daecbe0f30f0aca9d01ec3d8b7d5cfe8b860b2c95c8d23b2a04705960a0480038fcba07463ee63635a127c99b6492adcfe6a4f211bf7ac6d1fede674a8b31100bd30272df3d6b34f8f5abc9a586710f1b62979620f8285d94adb9fe5d62f738adb1bd644dc11998f39deaf4300000000000000", @ANYRES16=r5, @ANYBLOB="0103000000000000000005000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="edf5fa1c3feb"}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2a03}]}, 0x38}, 0x1, 0x0, 0x0, 0x645ab2f14554603d}, 0x40040) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0xb, {0x9, 0x50b3, 0xdc28, 0x8}}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400d47f", @ANYRES16=r6, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:08:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x8000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:49 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000002683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x8154000) 22:08:50 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x9000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) 22:08:50 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x8e5f) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000200), 0x8) fcntl$setsig(r4, 0xa, 0x40) ioctl$TIOCNOTTY(r3, 0x5422) 22:08:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x8154000) [ 313.620450][T16747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:50 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) 22:08:50 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000003683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 22:08:50 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xa000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x8154000) 22:08:50 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x8, 0x4) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:50 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000004683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 314.094234][T16779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:50 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x4}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc008}, 0x4004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r3, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 22:08:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 22:08:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xb000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:50 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:50 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000008683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 314.247318][T16789] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 314.308992][T16789] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 22:08:50 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000380)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000850}, 0x4010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x91b, 0xffff, 0x7f, 0xae, 0x6, 0x9, 0x1824, 0x6, 0x3ff, 0x4, 0x1f, 0x6db4, 0x4, 0x6, 0x200, 0x537f6e00, 0x0, 0xbdcb, 0x8, 0x8, 0x5, 0x6, 0xfff, 0x1000, 0x1f, 0x2, 0x8, 0x9, 0x7, 0x2, 0x1ff, 0x7]}) exit_group(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7ba5b18c6086adff04", @ANYRES16=r5, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:08:51 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) [ 314.422592][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xc000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:51 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000000e683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 314.543720][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:08:51 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 22:08:51 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket(0x1f, 0x800000003, 0xfffffffe) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000100)=0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', r3}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r6, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) getrandom(&(0x7f0000000180)=""/206, 0xce, 0x1) 22:08:51 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000001f683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:51 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000200), 0x8) dup3(r2, r5, 0x0) 22:08:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xd000000, 0x106d, 0x40}, [{}]}, 0x78) [ 314.757765][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 314.814952][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:51 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:51 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000003f683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xe000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:51 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x7) r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="b16a56000000006da0c112a1eb08bb440578015feaa7636c943ee87556e0edfc66ecf0351ef2e1e9ba20e84aab13e55f927a38f4141dec75e3a89de78bafc441aaee0ccb25a3712b9a66b768f95217e525edf6a1a6ca01e1670a8f7354084019cdeadc9f64c23f2f6302076284a7de3a0b5ff9f34c88303f0592454227885eebfcd2d946f5ea24a80395ee02c2a3b746267ecb504fe989919b7b2aeaae7543c547629f", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:08:51 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000200), 0x8) dup3(r2, r5, 0x0) 22:08:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) [ 315.030382][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xf000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:51 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:51 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r2 = openat$zero(0xffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) 22:08:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 22:08:51 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000141683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:51 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000200), 0x8) dup3(r2, r5, 0x0) 22:08:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x15000000, 0x106d, 0x40}, [{}]}, 0x78) [ 315.314195][T16868] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:52 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r0, r1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 22:08:52 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x80000, 0x80) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000240)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x140e, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) 22:08:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x16000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:52 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000200), 0x8) 22:08:52 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000060683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 22:08:52 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x17000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 22:08:52 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) 22:08:52 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x13) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x1, 0x0, 0xff, 0x4, 0x41, 0xe34a, 0x7f, 0x8, 0x1, 0x200, 0x15, 0x9, 0x8, 0x1b, {0xd5, 0x10000}, 0x2, 0x6}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:52 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000ffffff9e683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:52 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x18000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 22:08:52 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) socket$vsock_stream(0x28, 0x1, 0x0) 22:08:52 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000ec0683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x19000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:52 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 22:08:52 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @local, 0xe1}, 0x1c) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000340)=0x4) sendmmsg(r3, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040), 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000180)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14020000", @ANYRES16=r6, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:08:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1a000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:52 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) 22:08:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) 22:08:52 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:52 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000000041d0683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1b000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:53 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) 22:08:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}) 22:08:53 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x14, &(0x7f0000000740)={&(0x7f0000000480)={0x18, r3, 0x703, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x45) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x154, r1, 0xb03, 0x0, 0x0, {0xd}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc12}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xedd0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x338}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x19d7a416}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x154}}, 0x0) 22:08:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1f000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:53 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:53 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 22:08:53 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000fffffff0683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3effffff}) 22:08:53 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x800, 0x70bd27, 0xfffffffe, {0xd}}, 0x14}}, 0x0) 22:08:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x20000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:53 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 22:08:53 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 22:08:53 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x5) 22:08:53 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000007ffff683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x22090000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 22:08:53 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:53 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 22:08:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x26000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:53 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x14, &(0x7f0000000740)={&(0x7f0000000480)={0x18, r3, 0x703, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x120, r3, 0x102, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xff, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:53 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000f0ffff683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}) 22:08:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x27000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:54 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) 22:08:54 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:54 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000180)={{0x0, 0x0, 0x80}}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:54 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500007fffffff683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 22:08:54 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d0000003762fec54184eb63af8f5901e6030de6c0251a132aa1601179331e05961907c2cd0ed6ea3230f6f14c924b1f0045a02182f52992d55325490038de73af37d52b626bc95d56bef20000000000"], 0x14}}, 0x0) 22:08:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x30000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:54 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 22:08:54 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500009effffff683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:54 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 22:08:54 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1446570000b8", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'gretap0\x00', {}, 0x1}) 22:08:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x31000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:54 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 22:08:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) [ 317.897893][T17064] __nla_validate_parse: 9 callbacks suppressed [ 317.897903][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:54 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000f0ffffff683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:54 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0048400090b5453c50755f864c92ac82303e4c931a1e10a71d3183b8def3a0baf4cdf02d48a18f04b8ce6d4aa694629dfec15c36f3f342a28c1846167cb28311b801d714120401b2a8eeb41f703f1d1ed0d7f7d3ba0a995aaf81783dedd76bc0e3ed0c9729c3cd55482edf1f627b5f59c284b5479541e0858efcb5245d06337215f4f160acf791d3a25adb6b230944aad393b27112f7b3ccf41b50d780a6bd52fe0219b724edb1cb8bdfd38462f095619f913cf7e30dc9947506041a4cb24c97ff070000000000003f5ee14593168df2bd9d25bebc9a6b6d781c1d813ecd510928e7e23c73e678fbbb0fe6ff3f85a0b2402f5b134b7460ad51b3d7fa2cce652120a121d9740fde1965f4aee59c012e50e9bc7c312e018adb0cf88f886a10ff31f3bac59027154a10bc04d03307e102339d2e868134d3b6573a14c88e23be3d1a495ef30dd1227417153d90d456ad558bcff02ca31418c5b6bbb0", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:08:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x3e000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:54 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:54 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 22:08:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 22:08:54 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x1, 0x81, 0x420d, 0x23, @dev={0xfe, 0x80, [], 0x1c}, @loopback, 0x0, 0x40, 0x0, 0x1}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000eea293499ac2fe1f349c0ee79c5d88322cf39e4c79b9af3c1c0d3719afc683ce3c7c20a9c2927715bc04fc53a746a87103b4da4490bc2db4fa9fe8ba8452bc3a8f5758751c8bbb3148a6e87e98db383ab8d0757f4e06696f1c5d88b1ab64270440", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000380)) prctl$PR_GET_FP_MODE(0x2e) [ 318.172185][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x3f000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:54 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 22:08:54 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:54 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000020000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3e}) [ 318.351214][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x7f000000, 0x106d, 0x40}, [{}]}, 0x78) 22:08:55 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) [ 318.400491][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:55 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000030000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 22:08:55 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x80ffffff, 0x106d, 0x40}, [{}]}, 0x78) 22:08:55 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)={0x9, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x34}, 0x1000}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x14}, 0x8}}, {{0xa, 0x4e21, 0x33, @remote, 0x3}}, {{0xa, 0x4e24, 0x3, @private1, 0x10001}}]}, 0x20c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000da062bb8d80d5b35dc9499ac6b00e23a2e6613934eb9834e2bebd9895b9c9115e8a8f6c7601a5a9309f25e63e70387932452ac5ed637058426d648ebf7e35f0f74231b52c4eb0014a8b592662daac0f8e085", @ANYRES16=r2, @ANYBLOB="0000000006000000000000000000833526c0300c8352a38f5bc3f91e755aa58cdf9514bc088205a38d7d3764cb23b528b66e1be4e363f0ff2b8e0d75cc0b13d23415bb9610da743a83d65a7849a7c9ac9162d834f3"], 0xfffffffffffffee0}}, 0x20004880) 22:08:55 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) [ 318.644244][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 22:08:55 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000040000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:55 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) 22:08:55 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x9bffffff, 0x106d, 0x40}, [{}]}, 0x78) 22:08:55 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) 22:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) [ 318.883856][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:55 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="7ea625bd7000ffdbdf2517000000c40001802400028008000200de0000000800010008000000080004008300000008000100140000001400010069623a7465616d5f736c6176655f3100080003000400000038000400200001000a004e2300000009fc000000000000000000f4cc4c010001090000001400020002004e2300000000000000000000000008000300ea5bbb03000400000038000400200001000a004e2400000006ff020000000000000000000000000001070000001400020002004e2464010100"/210], 0xd8}, 0x1, 0x0, 0x0, 0x40001}, 0x40) r3 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x5f1, 0x410200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20800) 22:08:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xffffff80, 0x106d, 0x40}, [{}]}, 0x78) 22:08:55 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000080000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:55 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:55 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) 22:08:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0xffffff9b, 0x106d, 0x40}, [{}]}, 0x78) 22:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 22:08:55 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x1) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180)='NLBL_CIPSOv4\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) fanotify_mark(0xffffffffffffffff, 0x8, 0xa, 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8841}, 0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) sendmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r5, 0x1, {0x2, 0x1, 0x2}}, 0x18, &(0x7f0000000380)={&(0x7f00000002c0)="9c1cf02c3761471baaf8ca4f3f83e9ac3f6b28cf95570a347f1ad53189dea3e0fe41e2712a89f31c46301f7e9f352cdd4a127d6ae21247662ecd5b97aad43905e15ddcaccf37c9ab5ec823321375d97d3244dfe597968d791824b63a73d525d8c9fa760eebbe4faac585e19a64102c06b1f0c32c33a9ae7bf5a072897bc5b63f64bea9f106b034578cc4183d7770f214d25dce9afc57", 0x96}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000841) openat$proc_mixer(0xffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x460281, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) [ 319.233179][T17172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:55 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 22:08:55 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000000e0000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 22:08:56 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1007, 0x40}, [{}]}, 0x78) 22:08:56 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 319.417587][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x40}, [{}]}, 0x78) 22:08:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 22:08:56 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) [ 319.546870][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:56 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000600000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 319.623357][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:56 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:56 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) 22:08:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1009, 0x40}, [{}]}, 0x78) 22:08:56 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 22:08:56 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000f00000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:56 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x100a, 0x40}, [{}]}, 0x78) 22:08:56 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 22:08:56 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) io_uring_setup(0x4a67, &(0x7f0000000240)={0x0, 0xfa76, 0x1, 0x1, 0x312, 0x0, r0}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:08:56 executing program 5: syz_open_dev$dri(0x0, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:56 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000410100683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:56 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x100c, 0x40}, [{}]}, 0x78) 22:08:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:08:56 executing program 5: syz_open_dev$dri(0x0, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:56 executing program 1: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/97) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14080000", @ANYRES16=r2, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:08:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x100d, 0x40}, [{}]}, 0x78) 22:08:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 22:08:57 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:57 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000300683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:57 executing program 5: syz_open_dev$dri(0x0, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 22:08:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x100e, 0x40}, [{}]}, 0x78) 22:08:57 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:57 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 22:08:57 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000e00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x100f, 0x40}, [{}]}, 0x78) 22:08:57 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) 22:08:57 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:57 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000c00e00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:57 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1018, 0x40}, [{}]}, 0x78) 22:08:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 22:08:58 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:58 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:58 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000001f00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x101a, 0x40}, [{}]}, 0x78) 22:08:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 22:08:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x101b, 0x40}, [{}]}, 0x78) 22:08:58 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:58 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 22:08:58 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000003f00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x103b, 0x40}, [{}]}, 0x78) 22:08:58 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 22:08:58 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1063, 0x40}, [{}]}, 0x78) 22:08:58 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 22:08:58 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000014100683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1068, 0x40}, [{}]}, 0x78) 22:08:58 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:58 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 22:08:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106c, 0x40}, [{}]}, 0x78) 22:08:58 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 22:08:59 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000d04100683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:59 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) 22:08:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106e, 0x40}, [{}]}, 0x78) 22:08:59 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 22:08:59 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 22:08:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1078, 0x40}, [{}]}, 0x78) 22:08:59 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000006000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:59 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 22:08:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 22:08:59 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x109b, 0x40}, [{}]}, 0x78) 22:08:59 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 22:08:59 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000000ec000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:08:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) [ 323.088032][T17389] __nla_validate_parse: 14 callbacks suppressed [ 323.088042][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:08:59 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)={0x9, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x34}, 0x1000}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x14}, 0x8}}, {{0xa, 0x4e21, 0x33, @remote, 0x3}}, {{0xa, 0x4e24, 0x3, @private1, 0x10001}}]}, 0x20c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000da062bb8d80d5b35dc9499ac6b00e23a2e6613934eb9834e2bebd9895b9c9115e8a8f6c7601a5a9309f25e63e70387932452ac5ed637058426d648ebf7e35f0f74231b52c4eb0014a8b592662daac0f8e085", @ANYRES16=r2, @ANYBLOB="0000000006000000000000000000833526c0300c8352a38f5bc3f91e755aa58cdf9514bc088205a38d7d3764cb23b528b66e1be4e363f0ff2b8e0d75cc0b13d23415bb9610da743a83d65a7849a7c9ac9162d834f3"], 0xfffffffffffffee0}}, 0x20004880) 22:08:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x8}, [{}]}, 0x78) 22:08:59 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:08:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 22:08:59 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)={0x9, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x34}, 0x1000}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x14}, 0x8}}, {{0xa, 0x4e21, 0x33, @remote, 0x3}}, {{0xa, 0x4e24, 0x3, @private1, 0x10001}}]}, 0x20c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000da062bb8d80d5b35dc9499ac6b00e23a2e6613934eb9834e2bebd9895b9c9115e8a8f6c7601a5a9309f25e63e70387932452ac5ed637058426d648ebf7e35f0f74231b52c4eb0014a8b592662daac0f8e085", @ANYRES16=r2, @ANYBLOB="0000000006000000000000000000833526c0300c8352a38f5bc3f91e755aa58cdf9514bc088205a38d7d3764cb23b528b66e1be4e363f0ff2b8e0d75cc0b13d23415bb9610da743a83d65a7849a7c9ac9162d834f3"], 0xfffffffffffffee0}}, 0x20004880) 22:08:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x9}, [{}]}, 0x78) 22:08:59 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000041d000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 323.404706][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 22:09:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)={0x9, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x34}, 0x1000}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x14}, 0x8}}, {{0xa, 0x4e21, 0x33, @remote, 0x3}}, {{0xa, 0x4e24, 0x3, @private1, 0x10001}}]}, 0x20c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000da062bb8d80d5b35dc9499ac6b00e23a2e6613934eb9834e2bebd9895b9c9115e8a8f6c7601a5a9309f25e63e70387932452ac5ed637058426d648ebf7e35f0f74231b52c4eb0014a8b592662daac0f8e085", @ANYRES16=r2, @ANYBLOB="0000000006000000000000000000833526c0300c8352a38f5bc3f91e755aa58cdf9514bc088205a38d7d3764cb23b528b66e1be4e363f0ff2b8e0d75cc0b13d23415bb9610da743a83d65a7849a7c9ac9162d834f3"], 0xfffffffffffffee0}}, 0x20004880) 22:09:00 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0xa}, [{}]}, 0x78) 22:09:00 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000f000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) [ 323.670035][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x9, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x34}, 0x1000}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x14}, 0x8}}, {{0xa, 0x4e21, 0x33, @remote, 0x3}}, {{0xa, 0x4e24, 0x3, @private1, 0x10001}}]}, 0x20c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 22:09:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 22:09:00 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0xd}, [{}]}, 0x78) 22:09:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x9, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x34}, 0x1000}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x14}, 0x8}}, {{0xa, 0x4e21, 0x33, @remote, 0x3}}, {{0xa, 0x4e24, 0x3, @private1, 0x10001}}]}, 0x20c) 22:09:00 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000000ec03540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 22:09:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x78}, [{}]}, 0x78) 22:09:00 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:00 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000000007ffff3540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 22:09:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x9b}, [{}]}, 0x78) 22:09:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 22:09:01 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0xffffff80}, [{}]}, 0x78) 22:09:01 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000200683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 22:09:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2}, [{}]}, 0x78) 22:09:01 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:01 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x9, 0x1ff) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @void, @ipv6=@tcp={0xd, 0x6, "6ad45c", 0x2b8, 0x6, 0x0, @local, @private0={0xfc, 0x0, [], 0x1}, {[@srh={0x67, 0x12, 0x4, 0x9, 0x80, 0x0, 0x46, [@empty, @private1={0xfc, 0x1, [], 0x1}, @local, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @dev={0xfe, 0x80, [], 0x34}, @remote, @private0]}, @dstopts={0x16, 0x34, [], [@pad1, @jumbo={0xc2, 0x4, 0x65}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x0, 0xf2, "5fb04f034690094bbc6738ca8e2f33ded043359405fa66bcbddecb6e1e500961b7a62bb982e0854cdf69b4911be2cad5de134cc178de0abfeda2b5462daffbb9caaeecbf9a39e29b35cfe765b1e33fa2e2c23aecd430cb709fe06230f746a6feffa96627c239ffe7925d2640dba20bb9a51bbbf60528dc898111387428c8821f203fbb338c238b35fed2a3afa4db156a1f81b0bcad0595a8e3c2cc397a14fbd631c28ae6b4e1d10630698d7fed960587dc0a8751bb00c7bff386d3d0e5da585e0c24ed3dcfb5755a9f47177de06091a0e4a943cb2d6ea826e710b1227d86547829f8e05ad19fcecb8b454e7c268674520d32"}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x9}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic={0x3b, 0x80, "18dd5d15862e3027421375c9c08467107ba98bb5fc08c8c57b68b4cb2ec2e8b07a2540839d47abbb6f8dc36eef7541ac91fdf4de45a61a9058c22ea858be26bfbfdd4d3533a281260378ffb39cc29e627531f3765a4b49f7a049c7dd40f3c23a40a2abdaf1a57d1677f824950a4a261da9cf26fbfce7a29dcb60a18b27f29aaf"}, @pad1]}], {{0x4e22, 0x4e23, r1, r2, 0x1, 0x0, 0x7, 0x80, 0x5, 0x0, 0x3, {[@eol, @mss={0x2, 0x4, 0x2}]}}, {"56f488732d0956d6d7d1149002ba486074193d65f8daafe620e0c624ab90fa7f175c0e11c2dadf3c6ff0043b2b3fdee6cf7a033212900064642c09e405aa867b9a9149b482d5998f32023699be8c4b0f9abd6bbe"}}}}}, 0x2e0) exit_group(0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:01 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000300683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 22:09:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:01 executing program 1: clone(0x20020000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4014f50b, &(0x7f0000000040)={0x1, 0x6, 0x40}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3}, [{}]}, 0x78) 22:09:01 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:01 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000040)=0x6, 0x4) exit_group(0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}) r3 = openat$vga_arbiter(0xffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x940, 0x0) mknodat(r3, &(0x7f0000000200)='./file0/file0\x00', 0x80, 0x400) 22:09:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) 22:09:01 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000400683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x4}, [{}]}, 0x78) 22:09:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:01 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:01 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') openat$nullb(0xffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x181402, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d0000002bee963e396556921fb900c8c508c00c2c57c4f0"], 0x14}}, 0x0) 22:09:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}) 22:09:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x5}, [{}]}, 0x78) 22:09:01 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000800683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:02 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x7}, [{}]}, 0x78) 22:09:02 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x2) 22:09:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3effffff}) 22:09:02 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:02 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:02 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000e00683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 22:09:02 executing program 5: exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:02 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x8}, [{}]}, 0x78) 22:09:02 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:09:02 executing program 5: exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 22:09:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x9}, [{}]}, 0x78) 22:09:02 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:02 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000006000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:02 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc49}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r2, 0xb03, 0x0, 0x0, {0xd}, [@TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x38}}, 0x0) 22:09:02 executing program 5: exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}) 22:09:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xa}, [{}]}, 0x78) 22:09:02 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00274ce1a7e24dd45a9bf842c41f0eaee3f26b02557d7ce56024ab3574c0e4dad16a1c2146227f18007de161726f7739a3d79dafcc371c47c1bfadef31ed2eba3ca4daef8f290dd1e3dc4d270850d92f0976227e638062d9950a9c12769950fb930553ac9f45244b9d5429690e31de462be346bc673fa1cc374a29bc079c42d4a7de387b813a95a88190d5cb585236fafef1e58b3c1177b79a9f5283ce656dd0739f2ea09413be4778e0921f64a6f710dd64b12e5dcdf50bc0b80e412b8f51f547e9236a4de41d2f6a49100f1077189f8db300"/224], 0x14}}, 0x0) 22:09:02 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:02 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 22:09:02 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000f000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x4, {0x7, 0x1f, 0x3, 0x49a8409, 0x4, 0x10, 0x0, 0x2}}, 0x50) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:02 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xb}, [{}]}, 0x78) 22:09:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 22:09:02 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:02 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x25dfdbfd, {0xd}}, 0x14}}, 0x4050801) 22:09:03 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000004101683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:03 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 22:09:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xc}, [{}]}, 0x78) 22:09:03 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:03 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000003683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:03 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x40000002) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001200)={0x3}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000300)={0x1}, 0x4, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) msgrcv(r0, &(0x7f0000000080)={0x0, ""/12}, 0x10, 0x0, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/19}, 0x17, 0x1, 0x1800) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 22:09:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xd}, [{}]}, 0x78) 22:09:03 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000000e683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:03 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80}, @NFCTH_STATUS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40880) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f00000002c0)={0x6, 0x800, 0x4, 0x8}) ioctl$UI_END_FF_UPLOAD(r5, 0x406055c9, &(0x7f0000000240)={0xb, 0x500000, {0x53, 0x8000, 0x3ff, {0x4, 0xb18}, {0x5, 0x3}, @cond=[{0x0, 0x3, 0x1, 0x6, 0x0, 0x3}, {0x3, 0xfffd, 0x8, 0x7a, 0x80, 0x9a4d}]}, {0x52, 0x2, 0x2, {0x4, 0x5}, {0xfffd, 0x7}, @cond=[{0x0, 0x0, 0x6, 0x2, 0x3f, 0x5}, {0xb3, 0xfff, 0x7, 0x8001, 0x98e9, 0x3}]}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3e}) 22:09:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xe}, [{}]}, 0x78) 22:09:03 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 327.003669][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 22:09:03 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000c00e683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) [ 327.113783][T17701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xf}, [{}]}, 0x78) 22:09:03 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:03 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400df01416a5eadcc61dcb7c3736cee83c420bc3fbb92340eca33bfd1e0da851433037780b60708d1d633fb6dfda25874b239c8e6067a20c2c5b2a29b9520bf15d84d628cbaed374f6c50f0e57d80185382e08747ad00d614387a2ace25dee9324ce3577c72a33ca59d1cb5d55d66c97dcd568d03d0564fd3b95dfaf3cc4fe250626db6d9f3f744e984766e14d315c2902050a202e813bb49f9d2a7277d05bd932eed34c31969784509cfa582f184e74d383a5e7666b5cb5338f2cf1fa569b17913dd83af5d24c7e5", @ANYRES16=r1, @ANYBLOB="0381000000000000c4a81d48f04ceac6b6b14b9b3300000d0000005462d9ac8a8b5139ae831164ea9ce30998773a76f564ce18933aa61b48e614bbec8766a4c7c8cd2042116a89a9be9d3e5d43e0f7e95fa70b191bd15da434aec5b818b8581f242c216d055da23159467f386aab9d09a5ff6e868e9961d14a9439455b58"], 0x14}}, 0x0) 22:09:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 22:09:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x15}, [{}]}, 0x78) 22:09:03 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:03 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000001f683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:04 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x100, @local}, 0x80, 0x0}}], 0x2, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0xfffffffffffffffd, 0x0) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r5, 0x0, r6) r7 = getgid() setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x3fc, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x334, 0x334, 0x334, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @private0, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff000000, 0xffffff00, 0xff, 0xff000000], 'veth0_virt_wifi\x00', 'bridge0\x00', {}, {}, 0x2f, 0xfd, 0x3, 0x4d}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@unspec=@cgroup0={{0x28, 'cgroup\x00'}, {0x1, 0x1}}, @common=@unspec=@owner={{0x34, 'owner\x00'}, {r3, 0xee01, r6, r7, 0x3, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x2}, {0xffffffffffffffff, 0x4, 0x5}, 0x9, 0x58d}}}, {{@uncond, 0x0, 0x114, 0x13c, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x100, 0x4, 0x2}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x8, 0x3, 0x1, [0x8, 0xffe1, 0x8, 0x7f, 0x0, 0x0, 0x6a, 0x5, 0x4, 0x2, 0x200, 0x7698, 0x9, 0x8001, 0xda66, 0x401], 0x4}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x80, 0x5, 0x4}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x458) 22:09:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 22:09:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x16}, [{}]}, 0x78) 22:09:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:04 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/180, 0xb4}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:04 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000003f683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:04 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0x7) 22:09:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x17}, [{}]}, 0x78) 22:09:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x9c, &(0x7f0000000280)=""/156}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:04 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x18}, [{}]}, 0x78) 22:09:04 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f000000c000/0x1000)=nil) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x6000) r1 = socket$inet6(0xa, 0x3, 0x2) close(r1) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r2 = open(&(0x7f0000000000)='./file1\x00', 0x402040, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r1, 0x402, 0xb1c661d318500c5a) fcntl$setownex(r3, 0xf, &(0x7f0000000080)) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x10) ftruncate(r4, 0x208200) sendfile(r1, r2, 0x0, 0x8000fffffffa) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) 22:09:04 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000141683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r2 = openat$autofs(0xffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x2000, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000300), &(0x7f00000002c0)=0x4) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7f, 0x12043) r3 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000200)=""/53) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x19}, [{}]}, 0x78) 22:09:04 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:04 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000d041683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:05 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x91, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000280)=""/193, 0xc1}]}, &(0x7f0000000180)="b43e828411ea1b98a26617f3c8fa6b20c9e63c43ad23350d4c3f1a42a10fc4e1e403b851fc27885769497319a6181ab2d38abe2d4a6a135798b40c5c9e3d0b80a204e21fe04da77217c3058e982044d1855ad9fafb13b81dbff7c0af5e4503158bc3b589c449b3d9e8c08ed5f0d50e828b902bd8737ffdf9edd871444c1da177da5ab7bc16bd155bf054f97a2042050903", 0x0, 0x0, 0x10006, 0x0, 0x0}) 22:09:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1a}, [{}]}, 0x78) 22:09:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1b}, [{}]}, 0x78) 22:09:05 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000060683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:05 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x26}, [{}]}, 0x78) 22:09:05 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:05 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x3f) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x198, r1, 0xb03, 0x0, 0x0, {0xd}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3e6a}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x575400}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10000, @dev={0xfe, 0x80, [], 0x13}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x198}}, 0x0) r2 = getpgrp(0x0) setpriority(0x0, r2, 0x10ffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000140)={0x7, 'veth0_vlan\x00', {0x7fffffff}, 0x2}) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000200), 0x8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000200), 0x8) sendmsg$netlink(r0, &(0x7f0000003cc0)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x6760b76f82b91695}, 0xc, &(0x7f0000003980)=[{&(0x7f0000000480)={0x34b8, 0x33, 0x200, 0x70bd28, 0x25dfdbfc, "", [@generic="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", @generic="7a12fb317258e67d6d9d9e6987a11f153899828a8d5ca397e45107b8a67bf81fd0d3bdee17f1c959aacbda3c23c375af880e500f5ddb35b45db022ca9a73f2d4e6ef17de03a7dd0db4e16da1b68389e929119df417fcbe2e44bec105edaf7d40100a29d20d6959cf65e14db51d7d7cd295e260090cfad652261f960f0e419efbf99c86de95c8cdf08b979b04e1428929231154e82c1510709f9414dd01697ff00437c2dbdd506de4a9c4aded79d44ec7214590048c8f11e4c30dc74a3b68b32f232a2eb4a223440e32ef", @generic="be9dbdf121335a3e3ecc9b2dbd7c9257c49ca4366f38068cc507c8da31e2bf9d2238b412ef0863ca557e252e29a0cbb2dde44d9f615f6aca52890c26bb132bf9", @generic="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", @nested={0x20, 0x9, 0x0, 0x1, [@typed={0x14, 0x49, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @typed={0x8, 0x3c, 0x0, 0x0, @fd}]}, @nested={0x111e, 0x8a, 0x0, 0x1, [@generic, @generic="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", @generic="0b3c52641fc36f0fc2cbca9119f52116a0dab184225369cb6224ba0b57fe0303af42a4c0ccba96b1f5dd6501d9752c1b0a32abda4aa1b76796fda2da8bbd4b82fab0596d1621d31891602cfb6cdd9b55f53afdf47b72a3f9e179c149dd5af75be1219a65fb688d0d1d921e07a6c5be6cd7dab0a7bced1e4d74d1c2ce5dcbf99681b0dd0287e41e2e4f8c0d382a5ca581e7acbd3eff13df930acc2145decc5015bc217daa3be958b6c44d18811e1001f7d2167110aba0e026cc632585a2bb3ce5fffb1370a0a6b35f", @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="b667e78e1a7556dd66e7952bd610122fb2426b7c51d7ec3b3f458523778e580744bf425deb57426a440f74628782e26202b88da181ab484eb9fd8b2639c11b5160f49aeef0b4f9feabd5"]}, @nested={0x259, 0x5b, 0x0, 0x1, [@typed={0x13, 0x74, 0x0, 0x0, @str='broadcast-link\x00'}, @generic="7d8204b45ec935e71b4dee8de86998157410599545a1558e03b752d2a67c61aa07b74893ef9dfa89a79a3e951ba788b457761b7b4b9fa1aa2a1d207a30131ea8342538370a1b5a425e84343016a4119b732112ed055a087e9464f5e378ede01d360d5702ea8a9458642fd9f3e281e72684f20277eabd0920fda232a1b7c99c053372d3344933bbab094220fd07e3830f278247e049f9fcbc9be7c96097794ff00c", @typed={0x9c, 0x56, 0x0, 0x0, @binary="163eed7038147f42c2a8216fb55ec60957daad2f062f2645a0445656bfe7dd71d1faecfed7f8478127645a4bbe496e86d05982dfeed89501b722cce97c1884e05f8091acd8e6ef12b153c6ca69b51c621e9318c8216cd764ba1f8008c60f8f6a35b1e6931c19539bbbbd5685fdaf278940f1082d072436db23275e9776a4a3910457c8d0ca766adb039f479bfd8c56dde355e8621e664c54"}, @generic="3450cc547ab4d60fca22db1295d8a5c559348e9d2dc5e4b405823ee87137a4d48a9ff3d8f36083171787184bc7e48cb345517359dee97434a185207e9083c88dd47de24874b7bb53a7449602a6ffb4418af3feff8ec7a13d760e54197455a13d8394879f978d2f841740ecf182ed2d0e1fc515c07ad6c8eed9cc5b43c63170ac31dc7b67864e0f2dfc8a6b26e61193a5e6d885429a93b23670d2b30c10aa5a004a55b9d89308895aacdd05ba6c835063a79f56b55ef8936e12c522c482780cd5326e390acf58", @typed={0x9, 0x0, 0x0, 0x0, @str='syz0\x00'}, @generic="a2917bda1d9e20583e8b51a9358840c12b934a709d3f78be8c10939446fd5573a5fddc75d5dcec62d3ec", @typed={0x8, 0x38, 0x0, 0x0, @fd}]}]}, 0x34b8}, {&(0x7f0000003940)={0x40, 0x13, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@generic="e1e5926b8ec25181ae0844eaae6e9a8d49283a85361245594150160a3090f38908b63ee487d522eef6871cc4d073f4e8"]}, 0x40}], 0x2, &(0x7f0000003bc0)=[@rights={{0x14, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r0, r5]}}, @rights={{0x14, 0x1, 0x1, [r0, r6]}}], 0x100, 0x4c844}, 0x20048804) prlimit64(r2, 0x88d145e7bc05055d, &(0x7f0000000100)={0x7, 0x8}, 0x0) 22:09:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:05 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000ec0683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x27}, [{}]}, 0x78) 22:09:05 executing program 4: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffd, 0x13, 0x0, @buffer={0x0, 0x54, &(0x7f0000000280)=""/84}, &(0x7f0000000040)="2a9a0c432e143c41285ba9fcba365e43177b7a", 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:05 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:05 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000000041d0683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x30}, [{}]}, 0x78) 22:09:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x0, 0x0, @scatter={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/101, 0x65}]}, &(0x7f0000001280), 0x0, 0x10000000, 0x0, 0x0, 0x0}) [ 329.186004][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:06 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd2c, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:06 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x31}, [{}]}, 0x78) 22:09:06 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000000000f0683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2f, 0x60, @buffer={0x0, 0x78, &(0x7f0000000280)=""/120}, &(0x7f0000000180)="6204839f261c18c6ae5767b4d4aa25d6a5e01dfd873131fadf4266c70641a4b046429db9f4ad9da0c3b3278576d07a", 0x0, 0x2, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x820100) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x2, 0x7d}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$RTC_EPOCH_SET(r2, 0x4004700e, 0x22) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="1a614b1837d647b760000036c64d5bf0db3cddac5ca6dd052100000000ffff2e41bac8d1e83ecf010d0879d38efc00a8b25088429100007bd400000000"]}) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESOCT=r4, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x2c, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000400)=""/211) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="044f144bcc", @ANYRES16=r4, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0xd4) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x819}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x326}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc31}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0xfff, 0x0, [], {0x0, @reserved}}) 22:09:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) [ 329.557003][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3e}, [{}]}, 0x78) 22:09:06 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:06 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x210080, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000180)={0xf9, 0x81, 0x3b39d51d, "c347f3239af9a87937792016e1562f7431defba33aeb4f43cb753f7d42398d05e6f34f35270bc624618c77ceafdb49a61ce195593d3c16116a60d85810205a95b0b21fe48a94e5cbf1e0659d2f24b016e1014e70f0c43fe4d4688e075932a1f44997bc05c9b5b192df6643607bc6cb6d14619f331942000d9586a707bd96b38a0dbf5f6a5ea6eaa83f568da270722f20bf2d17cfdc055c5aa5ffffa5f459c665d4b4746977fd84002cdcfb5d49c76561e6ce99bd7990c67fe3f47194195905caf35e832368cee7d965e8060f6b63fb89d881cb94979ccabc52c68621584ee55f14db7d5d12565a1ae44aaf897b4fecfac1cc09ee1c6a148f4f"}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x37, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x200, 0x0, 0x25dfdbff, {0xd}}, 0x14}}, 0x24008044) 22:09:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c52b71c352db800e05f24000b0b37cc0ea90000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100706c756700000000030002000000000000000000"], 0x3c}}, 0x0) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x438, 0x3f3, 0x400, 0x70bd25, 0x25dfdbff, {0x10, 0x1, 0x0, [0x5, 0x4, 0x8, 0x20, 0x3, 0x902, 0x9, 0x7, 0x8d0, 0x1, 0x10001, 0x8, 0x40, 0x1, 0x6f70, 0x6, 0x1e65bccb, 0x80000000, 0x81, 0x0, 0x3, 0x8, 0x9, 0x8, 0x6, 0x6, 0x8, 0xfff, 0x3, 0x40, 0x40, 0x4, 0x7ff, 0x7fffffff, 0xffffffff, 0xffffffff, 0x1, 0x1f, 0xd02f, 0xcff, 0x3, 0x2, 0x5, 0x6618, 0x1f, 0x7, 0x101, 0x5, 0x6, 0x6, 0x1, 0x5abb, 0x8, 0x101, 0x800, 0x1, 0x9, 0x100, 0x6, 0x7ff, 0xeb9, 0x449f, 0x6, 0x9], [0x7, 0xffff, 0x0, 0x2c, 0x3, 0x2, 0x93, 0x8fe, 0x7fff, 0x5, 0x40, 0x4de5, 0xffff0b4d, 0x80000001, 0x0, 0x2, 0xd5, 0x3f, 0xec, 0x3, 0x4, 0x80000001, 0xdbece8b1, 0x9, 0xc5f, 0x9, 0x8001, 0x8, 0xfffffc01, 0x7, 0x0, 0x1, 0x10000, 0x5, 0x81, 0x0, 0x1ff, 0x7, 0x3, 0x81, 0x8, 0xcf, 0x7fffffff, 0x3f, 0x7fffffff, 0x2, 0xffffffff, 0x0, 0xce, 0x5, 0x5c1, 0x8, 0xe942, 0x0, 0x80000001, 0x20, 0x6, 0x80, 0x9, 0x6, 0x0, 0x8, 0x5], [0x8000, 0x7, 0x20, 0x8, 0x645, 0xff, 0x6, 0x80000001, 0x2, 0x9, 0x0, 0x3f, 0x1, 0x1, 0x4, 0xffff, 0x6, 0x200, 0x5b5683a6, 0x9, 0x1, 0x6, 0x20, 0x8000, 0x5, 0x3f, 0xdcd6, 0x6, 0x9, 0x80, 0x0, 0x1000, 0x7, 0x200, 0x794, 0x5, 0x4, 0xf1, 0x8, 0x7, 0x1ff, 0x2, 0xfffffffd, 0x9, 0x9, 0x7, 0x23, 0x2, 0x4, 0x6, 0x7, 0x1ff80000, 0x4, 0x3, 0x5, 0x9, 0x401, 0x1, 0x1f, 0x1, 0x0, 0x68a200d0, 0x6, 0x2b], [0x9, 0x5, 0x3, 0x0, 0x6, 0xa72, 0x10, 0xfffffff9, 0x4, 0x4, 0x0, 0x7, 0x17fb, 0x5, 0x4, 0x3, 0x1, 0x6, 0x49673e60, 0x3, 0x5, 0x1, 0xfffffffa, 0x5, 0x9, 0x7, 0x2, 0xfffffc00, 0x0, 0xd9, 0x8db7, 0x2, 0x1, 0x9568, 0x60000, 0x1ff, 0x7, 0xfffff000, 0x8, 0x0, 0x8000, 0x6, 0x80, 0x7fffffff, 0xfffffffe, 0x7, 0x5514, 0x1, 0x54e, 0x1ff, 0xfffffff7, 0x200, 0x90, 0x8, 0x200, 0x6, 0xb4, 0x4, 0x4, 0x7f, 0x3a, 0x80000001, 0x196d, 0x7fffffff], 0x16, ['/dev/sg#\x00', '@:\'.-^$$[-:\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x1) 22:09:06 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000007ffff40150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 329.791882][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:06 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400001, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000100)="ddb98e5586779ec7e45336936df9fd9861bcb948189c99f5e514067e23767b0a8845eda051", &(0x7f0000000200)=""/201}, 0x1c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$TIOCSIG(r3, 0x40045436, 0x36) 22:09:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x180}, [{}]}, 0x78) 22:09:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 22:09:06 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x300}, [{}]}, 0x78) 22:09:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) 22:09:06 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes256, 0x8, [], "64c499c906741a4562d2960a6ecc9b08"}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d000000b87ac36cfe85be43c7f5a549f6d95a96f9feee94dd0659ade921ed688836356c022b1a732616931e196bea1cffc898379fc5dddf68b22ef909f815a558c98f108e0539c24d61f16a4dce7f1c9da6fee8cfe08eefe9d0703bb034810ec27074ec2beac1a95cf38993cd43758771d07284701f0fc25d660b51e5182ab56b09"], 0x14}}, 0x0) 22:09:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 22:09:06 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000002683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 330.133827][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x500}, [{}]}, 0x78) 22:09:06 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) truncate(&(0x7f0000000040)='.\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400200, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)=0x6, 0x4) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:06 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 22:09:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x700}, [{}]}, 0x78) 22:09:07 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000f2e38d6bb4a50607db4f348a50eedefcdbdf2503000000b400000000000000000000800000e7ffffffeb4c7dfe00"/64], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) prctl$PR_GET_CHILD_SUBREAPER(0x25) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$rxrpc(r4, &(0x7f00000002c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xfffffffd, @mcast2, 0x3}}, 0x24) write$fb(0xffffffffffffffff, &(0x7f0000000180)="af30284038c1e34b1b34d5f3806f26f5d886485cfafd597d802a9299f02281bc51590980d1518ec85a07010f72ca73c6c5c388859c0a851a352b9d41804f5a07ef44901c0c9da5a16c868b50a1bba8e657ed811cf48b72f897a88acb82e0fd32507f64a81d0aa1a317b8adec01a154ed7f6795edf9039fe1cf", 0x79) [ 330.409236][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:07 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000003683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:07 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x5, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x880) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:09:07 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x900}, [{}]}, 0x78) 22:09:07 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x440500, 0x30) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x14}}, 0x1) 22:09:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0), 0x0, 0x0) 22:09:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x922}, [{}]}, 0x78) 22:09:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x1) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000180)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000280)=ANY=[@ANYBLOB="8800002000000000000000000000000000000000000000000000000000000000000000000000000000000000000063c21bcd00"/140]) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 330.734540][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0), 0x0, 0x0) 22:09:07 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000004683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:07 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:07 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xa00}, [{}]}, 0x78) 22:09:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffe, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0), 0x0, 0x0) [ 330.996598][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:07 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000008683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:07 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b00000000000000040d000000"], 0x14}}, 0x0) 22:09:07 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400200, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)=0x6, 0x4) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'veth1_vlan\x00', &(0x7f00000002c0)=@ethtool_modinfo={0x42, 0x56, 0x81}}) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000150a03000000000000000073797a300000000008000340000000020900010073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8010) 22:09:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xb00}, [{}]}, 0x78) 22:09:07 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000000e683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0x7) 22:09:07 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff030000", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) [ 331.320762][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.350821][T18031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xc00}, [{}]}, 0x78) 22:09:08 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:08 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x1, 0x81, 0x420d, 0x23, @dev={0xfe, 0x80, [], 0x1c}, @loopback, 0x0, 0x40, 0x0, 0x1}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000eea293499ac2fe1f349c0ee79c5d88322cf39e4c79b9af3c1c0d3719afc683ce3c7c20a9c2927715bc04fc53a746a87103b4da4490bc2db4fa9fe8ba8452bc3a8f5758751c8bbb3148a6e87e98db383ab8d0757f4e06696f1c5d88b1ab64270440", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000380)) prctl$PR_GET_FP_MODE(0x2e) [ 331.471042][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xd00}, [{}]}, 0x78) 22:09:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x800) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1f}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000040) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:08 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000180)="8f8a74847cee48fd8b87a58573f119fa23fe3c9d928429ae7a77daca39cbd384224d44c9a4ee1a18c192df936d70bbd1790b169fff6eed989672357132925741b7a37bcde4ea52958ff6c9a12137fa66a51e5def04d31fdfe2f2d9f740326c98c9fa96aca815623d81302038e405e7ab6105f025373d0bc8cd354e60bfe472f2e3063fbecec95015c842494c652e3cf5da2334cd09ea6f99d280e37f122231f98f77a9b380a045ce0ae27eb5d5c8a7235fbbe16ba220aae1bcd5728fd7c3817513b4408eae106761a2ece402c7fd1f969cd55282aa80b470f449032d103f01c0bc9653", 0xe3) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = memfd_create(&(0x7f0000000040)='dummy0\x00', 0x0) geteuid() r3 = geteuid() fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x3c, 0x0) socket$inet6(0xa, 0x100002, 0x9) setfsuid(r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0xfffffffc, {0xd}}, 0x14}}, 0x0) 22:09:08 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000060683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:08 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xe00}, [{}]}, 0x78) 22:09:08 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e0500000000000ec03540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:08 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x1, 0x81, 0x420d, 0x23, @dev={0xfe, 0x80, [], 0x1c}, @loopback, 0x0, 0x40, 0x0, 0x1}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000eea293499ac2fe1f349c0ee79c5d88322cf39e4c79b9af3c1c0d3719afc683ce3c7c20a9c2927715bc04fc53a746a87103b4da4490bc2db4fa9fe8ba8452bc3a8f5758751c8bbb3148a6e87e98db383ab8d0757f4e06696f1c5d88b1ab64270440", @ANYRES16=r1, @ANYBLOB="030b00000000000000000d0000004aebf5123ba946c75aa061bf753a6f8ef101b7bbc61857d6a9cd7c223665177d66729c2e3a6e2d8648f3a3485fb6560b0eae29a5ee39221fe2cc53592ceef496eebd55b98cf12c65945c2e1340934fd9834e9ed50af270a687ce8ae7e207cffe1245a73c44cebaadda4d8370bb8c2deae9f204899a5f3445519841848f79d9e4af1c73f16a15b79b7f5bfef0355100c2ec791c3f000000f362bfd59c63dbadbfb5f6e6efc15d29f672d688271da5bdfccb9241f72ddc9590136777e6e540152d7d19739e12486733b40308b187be6601752329cff51071ccf5b0980e3376769ad6ad2f6ceb4cd930b8387b55179b2d269f9775aad6722455a48df5617906f1a1f85942fc94e3c75a1a86e4793139b749f57a284c95373303052f426ab16a2fce8fdb4abbbb295355e1484b8c9ac0a4822e2524d7b836a93e30c1c6b1a5468c5042ba25e2731764dacd8d019a2bbdafded08610c930aa433bec15acb3703bb37d670b8db4abe791e8f720a23c356643775ba592aedef01bb503d55d1210"], 0x14}}, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000380)) prctl$PR_GET_FP_MODE(0x2e) 22:09:08 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={r3, 0x69, 0x20, 0x6, 0x4}, &(0x7f0000000300)=0x18) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x1, @private2, 0x12}, @in6={0xa, 0x3ff, 0x4, @local, 0xffffff80}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x48) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r6, 0x9, 0x24}, &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368332d000000000000000000000000000000000000000000000000010000000000000000000000000fbace40b8cbe5e46dd4000000000000"], &(0x7f0000000100)="2570b828db09097d70", &(0x7f0000000280)="e8a71b03fbc005a274a2e52416251bec8f0bc38734c166a4b60165494eda55724d56cec1") r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14f0d200", @ANYRES16=r7, @ANYBLOB="030b07000000000000000d000000"], 0x14}}, 0x0) 22:09:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xf00}, [{}]}, 0x78) 22:09:08 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x3f, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x341}}, [0x5148, 0x4, 0xf454, 0xf44a, 0x0, 0x6, 0x1f, 0x0, 0x401, 0x2, 0x1, 0x5, 0x80000001, 0x8, 0x5]}, &(0x7f0000000040)=0xfc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r3, 0x7}, 0x8) r4 = openat$full(0xffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={r7}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000400)={r7, 0x25b, 0xe4, "c13574f59ac0304d9f4988cd1a9d0e343ebdb8f05735b872d10cf1e2a3288f0cc3bed5ec86b9f3e71d5134d276645538eae4bb0cef53dedb512b48e23fefa96eab064105690f630d01d6812fdc81acf62812254626b983085b1cc62f646d7ad3aee6fd20a1133efc6249534e385d15f650abf67261ad6bfbb6ae1b0b1bba411f4e2f65390a3e342680df26759f3e7c4a561e00bd8ca4554d6772ed813a08c3453340ddb9fc95b9448126e97871bee27666d5bb2e3a11cd44f130107db2b9f5fb106d772ccf05fab202f95e36c44cf58eaab46e1724e0679fa8436f9a0b0442e935299cbf"}, 0xec) 22:09:08 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030bffffffa75876ab0308ede848ff000000000d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x0) 22:09:08 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x1, 0x81, 0x420d, 0x23, @dev={0xfe, 0x80, [], 0x1c}, @loopback, 0x0, 0x40, 0x0, 0x1}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000eea293499ac2fe1f349c0ee79c5d88322cf39e4c79b9af3c1c0d3719afc683ce3c7c20a9c2927715bc04fc53a746a87103b4da4490bc2db4fa9fe8ba8452bc3a8f5758751c8bbb3148a6e87e98db383ab8d0757f4e06696f1c5d88b1ab64270440", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000380)) prctl$PR_GET_FP_MODE(0x2e) 22:09:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1500}, [{}]}, 0x78) 22:09:08 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150224001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:08 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2200, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000000308010800000000000000000a00000a0600024088b500000900010073797a30000000000c000480080001400000003f0c06000000000840000000ff0900010973797a3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x900}, 0x4000001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0xd1, 0x7, "55a756e1f05ce68ea327ac780cfa02260488cd238edee9fc09834474cd96f26b95860f7d5dbd6317ec40460ad001fde1367d03bb69149c37b1668153d9e48c8db770cd48cff9153978f44d97d7515a50f2fbe6a95ed8e371f998c5c4ab8b1b4bf66fbaa8fac61b1ec98ba0b85809fcee81db2bc0052832e9266927bc680933af66f0f6920548d13f3ae7d90f8212798923b1185bd5bb6a91689e611fd00117d6d91f51cb4b5595973e35c7cacd0dfd590f06ae9b30a5a651e70da64d03c8a12112f22c4f65bcff89e86506034bfc12c43dde1116b32a5d745fc3ddab7f15b6d850d808c82f2b7764ac314d69c29b1f15358137b2d0a2ce0cbbf6015b8719c6dc", 0x2, 0x6, 0x5, 0x1f, 0x9, 0x4, 0x81}, r2}}, 0x120) 22:09:08 executing program 1: clone(0x2000a004e7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="001000", @ANYRES16=r1, @ANYBLOB='\r\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 22:09:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1600}, [{}]}, 0x78) 22:09:08 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x1, 0x81, 0x420d, 0x23, @dev={0xfe, 0x80, [], 0x1c}, @loopback, 0x0, 0x40, 0x0, 0x1}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000eea293499ac2fe1f349c0ee79c5d88322cf39e4c79b9af3c1c0d3719afc683ce3c7c20a9c2927715bc04fc53a746a87103b4da4490bc2db4fa9fe8ba8452bc3a8f5758751c8bbb3148a6e87e98db383ab8d0757f4e06696f1c5d88b1ab64270440", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000380)) 22:09:08 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150324001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:08 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x0, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:08 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x4}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}}}, 0x40001) 22:09:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1700}, [{}]}, 0x78) 22:09:09 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150424001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x1, 0x81, 0x420d, 0x23, @dev={0xfe, 0x80, [], 0x1c}, @loopback, 0x0, 0x40, 0x0, 0x1}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000eea293499ac2fe1f349c0ee79c5d88322cf39e4c79b9af3c1c0d3719afc683ce3c7c20a9c2927715bc04fc53a746a87103b4da4490bc2db4fa9fe8ba8452bc3a8f5758751c8bbb3148a6e87e98db383ab8d0757f4e06696f1c5d88b1ab64270440", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) 22:09:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1800}, [{}]}, 0x78) [ 332.536277][T18125] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 22:09:09 executing program 1: clone(0x200220009fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) [ 332.592026][T18136] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 22:09:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1900}, [{}]}, 0x78) 22:09:09 executing program 4: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000200), 0x8) dup(r6) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000000040)=""/11) 22:09:09 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x81, 0x420d, 0x23, @dev={0xfe, 0x80, [], 0x1c}, @loopback, 0x0, 0x40, 0x0, 0x1}}) 22:09:09 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150824001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:09 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0xffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0xc6801, 0xc0) write$P9_RAUTH(r2, &(0x7f0000000100)={0x14, 0x67, 0x2, {0xa, 0x4, 0x5}}, 0x14) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x21, 0x37, 0x2, {0x1, 0x1f, 0x3, 0x0, 0x3, '(\'\xad'}}, 0x21) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000180)={0x5e9f09e8, 0xfff, 0xc8ce}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x30000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) read$hiddev(r3, &(0x7f0000000400)=""/239, 0xef) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x5}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030b000000000000fe500d000003"], 0x14}}, 0x0) 22:09:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/209, 0xd1}, {&(0x7f0000001580)=""/208, 0xd0}, {&(0x7f0000001680)=""/156, 0x9c}, {&(0x7f0000001740)=""/200, 0xc8}], 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840)='nl80211\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001880)={'vxcan1\x00', r5}) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) getsockname$packet(r10, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x34, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x2000001) 22:09:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1a00}, [{}]}, 0x78) 22:09:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:09 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150e24001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:09 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0xfffffecb, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x8}, 0xb) 22:09:09 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 22:09:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1b00}, [{}]}, 0x78) 22:09:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1f00}, [{}]}, 0x78) 22:09:10 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540156024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:10 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) 22:09:10 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)={0x48, r2, 0x703, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2e6e7c13d3042261}, 0x20000004) exit_group(0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x300, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x74}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x639}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ID={0xad, 0x3, "9aabcbce1fcde727d235981965de46817205f07eb049a9a7c5d4b04b90bbda4d5ca6e855b50de69c5886f93b4c5c751cd2ec85f347dbe84b8708d5a5b161fafdd4a0d33c20ba614d9f6642b6f2cf210b75093ced5f8d475bdc10e45e6e17e8ff9a1cb524d28d77824f07181c68193ac00b178be8e554b6acc4b3432f073ef700ea3c2e87f2a4b1ee9a0256c01166cf760bd58b245db08c9cc0c6f2093a25ee3fbb7f044ebdcf7dfcb4"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f1e23215ddda42072753eea1c78f38ddaffb874cfb0043ca"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3c23aaa4d2f3c5c23eb629dd2b1a8a974fad1c7783343746a218bd4866"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "3efdd9d77d21398cad8a83dbdb4f76fa1f1283d9c53fefc2b60500f3988dbbabcb3ad40383f9ce98e6f7507c06283b2f4490cc1d1438fb99b13fa879862d76d98c6c9f80ba0a52cb"}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x8000}, 0x200000d8) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:10 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2000}, [{}]}, 0x78) 22:09:10 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024021d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:10 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b00001000000000000d00fa92"], 0x14}}, 0x0) 22:09:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2209}, [{}]}, 0x78) 22:09:10 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) 22:09:10 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:10 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000040)={0x7, 0x3, 0x7f47e3fb, 0x6, 'syz1\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:10 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:10 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024031d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2600}, [{}]}, 0x78) 22:09:10 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) 22:09:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2700}, [{}]}, 0x78) 22:09:10 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:10 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xf4, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x45, 0x7, 0x1, 0x0, "6b686fccc98a7467f34d48fc01df67cfbcea0117aa673f5ecd9f2d5c70f8ee03c4dbca703f42a89aca93b49def84a21e29abd520294db6f75f5ffbb5252dd71882"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:09:10 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024041d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:10 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 22:09:10 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x7, 0x1, 0x9, 0x4, 0x1, "c76aba3755212bd8"}) 22:09:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3000}, [{}]}, 0x78) [ 334.302752][T18254] __nla_validate_parse: 21 callbacks suppressed [ 334.302762][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) [ 334.389310][T18261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:09:11 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024081d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3100}, [{}]}, 0x78) 22:09:11 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000200), 0x8) dup(r6) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000000040)=""/11) [ 334.549755][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:11 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e050000000000006835401500240e1d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:11 executing program 1: r0 = openat$sequencer(0xffffff9c, &(0x7f00000006c0)='/dev/sequencer\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)={0x30, r2, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001200)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xbafbd5d49ba469e4}, 0xc, &(0x7f00000011c0)={&(0x7f0000000740)={0xa60, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x356, 0x80, "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"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xfffffffa}, @NL80211_ATTR_FTM_RESPONDER={0x128, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "a55a4c846d5c4f85a658d3b786b85a0ac24029440b7689bc65f7c6333b5b20f1c7f5df68e683b898c7f27013b917393e36ff1e5a670fdd40fb656b6501a6608dd10202cb0c1ea756fee72914a0e09dd0e9c596bcdd2f865eea30d1651ee5dfbcbdf00a3577ce68beeba65c4e4232bc855d6227c82fb4b9f1105000707a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "d5e4a9955c05bf0e11e15e269705ffd3f0b1549b1cff08cac061cc635c591d9c71d4193ccd5b294cc27adcc5747c494add4ed93b550c8511450625b1f9769dcb17b3220fd0847d50b983ec6e4d65e1b1c1a499d348e7883fd38db825729f27060cf130c5cf6be17a35e70a3927608533dc73ad9d39ff9791954164f069fbfc15c98d62af8fb1aebc2416371e509ad7bdba"}]}, @NL80211_ATTR_BEACON_HEAD={0x598, 0xe, "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"}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0xa60}, 0x1, 0x0, 0x0, 0x4040}, 0x80) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030b000000008ffd81be9a1e03d6"], 0x14}}, 0x0) 22:09:11 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000200), 0x8) dup(r6) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000000040)=""/11) 22:09:11 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0x1c}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000dc208e859da2be3e25fa66a51e40a53ab30a3bf3578f3aa043fd50947e68f46942e998c6dd196d37ba2c3094495d4e12707dd20821c8def646adbca49922666b3491fd4ec3faf32494d9ca4dec52ecc3e111fe0610647b86c77ffb3fa52f25ae", @ANYRES16=r2, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:09:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3e00}, [{}]}, 0x78) 22:09:11 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000200), 0x8) dup(r6) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000000040)=""/11) [ 334.904303][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:11 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024601d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3f00}, [{}]}, 0x78) 22:09:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:11 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000200), 0x8) dup(r6) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) 22:09:11 executing program 1: clone(0x20002226efc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 22:09:11 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000200), 0x8) dup(r6) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 22:09:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x7f00}, [{}]}, 0x78) [ 335.273767][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:11 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200), 0x8) mount(&(0x7f00000000c0)=@sg0='/dev/sg0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cifs\x00', 0x80000, &(0x7f0000000340)='*%-+.\xa1.!^[-&@*&\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) keyctl$chown(0x4, 0x0, 0x0, 0x0) setfsgid(0x0) dup(r4) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000100)={0x65, 0xffffffff, 0x5866, {0xfb, 0x5c}, 0x81f, 0x1004}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="d1e908b7f1deea3629493ad9700a0165dfc546a1b533aae521d8593e8ee7903d53b2c9c404c9199cdf120868c25c118b1c443f28adc01f4a2623adc12803be32841a7bf9f86510162e18a0122b6fcbcec77d7ae0fa87fb5dc88e88e93f000000000000000000000000002b7476ca000000000000000000"], 0x14}}, 0x0) 22:09:12 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:12 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001f001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:12 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000200), 0x8) dup(r6) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) 22:09:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1000000}, [{}]}, 0x78) 22:09:12 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000200), 0x8) dup(r5) [ 335.544157][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:12 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:12 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000340)={'ip6_vti0', 0x32, 0x33}, 0xb) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x4}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x168, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xa122, @private2={0xfc, 0x2, [], 0x1}, 0xe12}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfff, @loopback, 0x1000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc121}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x48a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}]}]}, 0x168}}, 0x41) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="030b00000000000000000d000000"], 0x14}}, 0x0) 22:09:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1800000}, [{}]}, 0x78) 22:09:12 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d021fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 335.790635][T18344] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 22:09:12 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 335.831530][T18345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 335.874477][T18344] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 22:09:12 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:12 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) 22:09:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2000000}, [{}]}, 0x78) 22:09:12 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) 22:09:12 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d031fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 336.098973][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3000000}, [{}]}, 0x78) 22:09:12 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 22:09:12 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:12 executing program 1: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d021fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 336.303780][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:12 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 22:09:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x4000000}, [{}]}, 0x78) 22:09:13 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:13 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d041fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:13 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x5000000}, [{}]}, 0x78) [ 336.591802][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:13 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d081fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:13 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xfff, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x80000000, 0x5, 0x44, &(0x7f0000ffd000/0x1000)=nil, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) 22:09:13 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x7000000}, [{}]}, 0x78) 22:09:13 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0x300) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000380)=""/223) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:13 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:13 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semget$private(0x0, 0x2, 0x300) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x8000000}, [{}]}, 0x78) 22:09:13 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d0e1fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:13 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r4 = socket(0x1, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', r5, 0x29, 0x7f, 0x81, 0x2, 0x1, @loopback, @empty, 0x1, 0x81, 0x6}}) dup3(r0, r1, 0x0) 22:09:13 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x9000000}, [{}]}, 0x78) 22:09:13 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:13 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:13 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r4 = socket(0x1, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', r5, 0x29, 0x7f, 0x81, 0x2, 0x1, @loopback, @empty, 0x1, 0x81, 0x6}}) dup3(r0, r1, 0x0) 22:09:13 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) semget$private(0x0, 0x207, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:13 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d601fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xa000000}, [{}]}, 0x78) 22:09:14 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:14 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) r1 = semget$private(0x0, 0x4, 0x237) semctl$IPC_RMID(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:14 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r4 = socket(0x1, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', r5, 0x29, 0x7f, 0x81, 0x2, 0x1, @loopback, @empty, 0x1, 0x81, 0x6}}) dup3(r0, r1, 0x0) 22:09:14 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:14 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x4000010, r0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x2010, r2, 0x10000000) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r5 = io_uring_setup(0x1, &(0x7f0000000040)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f0000000200), &(0x7f0000000180)='./file0\x00', 0x80, 0x0, 0x1, {0x0, r6}}, 0x10000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 22:09:14 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xb000000}, [{}]}, 0x78) 22:09:14 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) semget$private(0x0, 0x4, 0x237) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:14 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$netlink(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$CHAR_RAW_RESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x8, 0x9}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:14 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:14 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket(0x1, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', r3, 0x29, 0x7f, 0x81, 0x2, 0x1, @loopback, @empty, 0x1, 0x81, 0x6}}) 22:09:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xc000000}, [{}]}, 0x78) 22:09:14 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35dc01cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:14 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xd000000}, [{}]}, 0x78) 22:09:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x4a, &(0x7f0000000300)=""/74}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xc80, 0x80000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x6, 0x5, 0x2, {0x5, 0x5c}, 0xa848, 0x81}) 22:09:14 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket(0x1, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:14 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:14 executing program 0: semget$private(0x0, 0x207, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:14 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798ffff", 0x4c}], 0x1}, 0x0) 22:09:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xe000000}, [{}]}, 0x78) 22:09:14 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:14 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:15 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket(0x1, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) 22:09:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x7f, 0xff, @scatter={0xffffffffffffffcf, 0xc1, &(0x7f0000000040)}, &(0x7f0000000280)="d97a02606c0d0da85235def47004ee07d61d4ec5d5137417371c3dd68ffe0fbdc51ccd62a7aeb11e72ea111f3a6d6b3829a2a290d74f4f43e59989a8b09c49a49e1cadeddc6b596fd98162d3ef1aaa69a45265f825839a2875603dab684b029ce6698d529abbb4374fe56dd6855fc159ad11122ed89c7abcf2833f104a125c", 0x0, 0x8001, 0x1, 0x1, 0x0}) 22:09:15 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x80) 22:09:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xf000000}, [{}]}, 0x78) 22:09:15 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988102", 0x4c}], 0x1}, 0x0) 22:09:15 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x800, 0x222200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:15 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket(0x1, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) 22:09:15 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x80) 22:09:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x15000000}, [{}]}, 0x78) 22:09:15 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:15 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket(0x1, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) 22:09:15 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988103", 0x4c}], 0x1}, 0x0) 22:09:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/183, 0xb7}]}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) 22:09:15 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x80) 22:09:15 executing program 5: exit_group(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x16000000}, [{}]}, 0x78) 22:09:15 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) socket(0x1, 0x800000003, 0x0) 22:09:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000002c0)={0x0, 0x7, 0xa04, 0x0, 0xe}) close(r2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0xd, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x200}}, 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$isdn(r1, &(0x7f0000000200)={0x22, 0xc0, 0x8, 0x1, 0x3f}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r5, 0x6}}, 0x10) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000180)=0x3, 0x4) 22:09:15 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) 22:09:15 executing program 5: exit_group(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:15 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988104", 0x4c}], 0x1}, 0x0) 22:09:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x17000000}, [{}]}, 0x78) 22:09:15 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) 22:09:15 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:15 executing program 5: exit_group(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x410002, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$dlm_plock(0xffffff9c, &(0x7f0000000a80)='/dev/dlm_plock\x00', 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={&(0x7f00000004c0)="f8e1dc4c507bbbf8a4826c36eb0c85cb612a0cf7a8d0bbd3e647f42751dd4741f2f2cd8eade673c968c50211c76f8eb8ba0a9c", &(0x7f0000000880)=""/38, &(0x7f00000008c0)="c8cf6a88781af02b14c2ffad0801f1fd5f26a500fae4800bacd754505b92358325168a93bacb7303fde30ed5c849b760647e27a9d0555845bfbd5579b76e3381c40abed6557dc30f3c3be9eba2190673e7878b9d73514c7495c9573b7c45f37bdca9452d414b4e476466374cd4cec48c44f965fe8711b4b7fcc18e936cf2ce5c9c209b1701daba3c594e9734f5cc2ad90f033db07677aa187e2f33f88fe44540354691da9b3d1784e7af97ca977020bc8794ad2fe8b3cf17032b0c923f1051870fefb357bb5e71b19be6c10aea96a6eee129d20c106d586d30d2b3d148f1e20de0b184bf860463e346506deb73", &(0x7f00000009c0)="b53b9f6c88817c3a856f21e873717ec249c1dd6d1cb3260cf90b433229457247b63c79172d53e968463c462424a0fd30f117821ff0bfdb1031ffdafb25650f0690c4071182e9682d9c9b39eb3509f45b9e7e8c5ab8d91174bfef1951ee0df83b7167ae2a0f6dd937a99597d3a8f3b100e97a90d423ab5d73fc041c77ea87b93e9c4903b915c742d14cc8457e4fe7cf29c1fecb420b0e41c814f10f4fa9f5bffdaf7845c370f849", 0xc9, r4, 0x4}, 0x38) recvmsg$kcm(r2, &(0x7f0000000800)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000006c0)=""/239, 0xef}], 0x8}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000840)={0x0, 0x10000, 0x8000, 0x3}, 0x10) close(r3) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r7, 0x200}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r7, 0x0, 0x2, 0x4}}, 0x20) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000200)={0xe989c321b34fd62b, 0x3f, 0xe48, r0, 0x0, &(0x7f0000000180)={0x990a6b, 0xffff, [], @p_u32=&(0x7f0000000040)=0x3f}}) ioctl$KDDISABIO(r8, 0x4b37) 22:09:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x18000000}, [{}]}, 0x78) 22:09:15 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) 22:09:15 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:15 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:16 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988108", 0x4c}], 0x1}, 0x0) 22:09:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x19000000}, [{}]}, 0x78) 22:09:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:16 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:16 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) semget$private(0x0, 0x4, 0x237) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:16 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1a000000}, [{}]}, 0x78) 22:09:16 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798810e", 0x4c}], 0x1}, 0x0) 22:09:16 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) semget$private(0x0, 0x4, 0x237) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:16 executing program 4: openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x58f1c0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f0000000040)='./file0/file0\x00', r0}, 0x10) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000280)=0x3) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:16 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:16 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1b000000}, [{}]}, 0x78) 22:09:16 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) semget$private(0x0, 0x4, 0x237) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x80) 22:09:16 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendto$inet(r1, &(0x7f0000000040)="d852fc9a4f764bf347b0870ee34fa2a6f2", 0x11, 0x4008000, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x80000000, 0x7fef}) ioctl$SG_IO(r2, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x40, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x10000, 0x0, 0x0}) 22:09:16 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988160", 0x4c}], 0x1}, 0x0) 22:09:16 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) semget$private(0x0, 0x4, 0x237) 22:09:16 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:16 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1f000000}, [{}]}, 0x78) 22:09:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bind$packet(r1, &(0x7f0000000180)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) 22:09:16 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881f0", 0x4c}], 0x1}, 0x0) 22:09:16 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000180)=0x7) [ 340.195470][T18641] __nla_validate_parse: 14 callbacks suppressed [ 340.195480][T18641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:16 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x20000000}, [{}]}, 0x78) 22:09:16 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x1f, 0x1f}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:17 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 22:09:17 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x22090000}, [{}]}, 0x78) 22:09:17 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988141", 0x4c}], 0x1}, 0x0) [ 340.472601][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100000, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0xc3000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000440), 0x4) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r3, 0xffffff81}, &(0x7f0000000180)=0x8) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x97, 0x7fff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="15000000008000001feab400006bb8a72ebd73f59bded53a730104f700000000000b6b4d8a34596924b7344274147645b072b4ef38c1a77e330bdf183c009e07000000000000005801ad7b5d1b8d22823ac70d13e15a68d168db142d5851f432bce4e89e0b135e69e922d2d7e1430765cd82e93a9611a65f846899c6308ffffba2918761200b73347e6df4a08d0000"]) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xffffffffffffffff, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/198, 0xc6}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:17 executing program 0: semget$private(0x0, 0x207, 0x0) 22:09:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x26000000}, [{}]}, 0x78) 22:09:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x408100, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0xf4, [], 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380)=""/244}, &(0x7f0000000500)=0x50) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000200)) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000280)={0xa7, 0x2, 0x1, "985f4397ebc28e4db23ea16de437b055048dd846f59c3c6635f8bf12bfbea52e1b66c3b8f1013f7a537158a5ab4d551272ff5294a7ecbae76d6e483340a7c90a349d37fd32ec24c86899eb750e421597a565640e93351234a2ed2a52feb68b8b316b85734b3f38f7b8b0b522545656d53e73ad0859c97d569262bf24ef13abd6bee4a8653581314dfa4dc8e86ec7bef0b931bde6016a310a3c9c8a02930b16d76ef942d9db3c13"}) 22:09:17 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:17 executing program 0: semget$private(0x0, 0x0, 0x0) 22:09:17 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000280)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x6, 0xc1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000100)=""/81, 0x51}]}, &(0x7f0000001280), 0x0, 0xfffffffd, 0x0, 0x0, 0x0}) [ 340.824479][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x27000000}, [{}]}, 0x78) 22:09:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:17 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:17 executing program 0: semget$private(0x0, 0x0, 0x0) 22:09:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x30000000}, [{}]}, 0x78) 22:09:17 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:17 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:17 executing program 0: semget$private(0x0, 0x0, 0x0) [ 341.176395][T18716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x31000000}, [{}]}, 0x78) 22:09:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:17 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x5501, 0x740000) 22:09:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3e000000}, [{}]}, 0x78) 22:09:17 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881c0", 0x4c}], 0x1}, 0x0) [ 341.412892][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:18 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3f000000}, [{}]}, 0x78) 22:09:18 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) [ 341.603401][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:18 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:18 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x7f000000}, [{}]}, 0x78) 22:09:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2288, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 341.824486][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:18 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x80ffffff}, [{}]}, 0x78) 22:09:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:18 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x9bffffff}, [{}]}, 0x78) [ 342.082103][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:18 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988101", 0x4c}], 0x1}, 0x0) 22:09:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) [ 342.450281][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xffffff80}, [{}]}, 0x78) 22:09:19 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:19 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:19 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881d0", 0x4c}], 0x1}, 0x0) 22:09:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xffffff9b}, [{}]}, 0x78) [ 342.721340][T18798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:19 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:19 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:19 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:19 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:19 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1000000000000}, [{}]}, 0x78) 22:09:19 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:19 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:19 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:19 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:19 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798810e", 0x4c}], 0x1}, 0x0) 22:09:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x100000000000000}, [{}]}, 0x78) 22:09:19 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x180000000000000}, [{}]}, 0x78) 22:09:19 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:20 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988141", 0x4c}], 0x1}, 0x0) 22:09:20 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:20 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x200000000000000}, [{}]}, 0x78) 22:09:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:20 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:20 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x300000000000000}, [{}]}, 0x78) 22:09:20 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x400000000000000}, [{}]}, 0x78) 22:09:20 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:20 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:20 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:20 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x500000000000000}, [{}]}, 0x78) 22:09:20 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x700000000000000}, [{}]}, 0x78) 22:09:20 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:20 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881ff", 0x4c}], 0x1}, 0x0) 22:09:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:21 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x800000000000000}, [{}]}, 0x78) 22:09:21 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:21 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:21 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x900000000000000}, [{}]}, 0x78) 22:09:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xa00000000000000}, [{}]}, 0x78) 22:09:21 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:21 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881ff", 0x4c}], 0x1}, 0x0) 22:09:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:21 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xb00000000000000}, [{}]}, 0x78) 22:09:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:21 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:21 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) [ 345.332316][T18946] __nla_validate_parse: 9 callbacks suppressed [ 345.332328][T18946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xc00000000000000}, [{}]}, 0x78) 22:09:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:22 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) 22:09:22 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:22 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 22:09:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xd00000000000000}, [{}]}, 0x78) [ 345.644983][T18964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:22 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:22 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 22:09:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xe00000000000000}, [{}]}, 0x78) [ 345.925348][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xf00000000000000}, [{}]}, 0x78) 22:09:22 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 22:09:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:22 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1500000000000000}, [{}]}, 0x78) [ 346.174123][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:22 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:09:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:22 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:22 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0), 0x0, 0x0) 22:09:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1600000000000000}, [{}]}, 0x78) 22:09:23 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 346.459405][T19006] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:23 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0), 0x0, 0x0) 22:09:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1700000000000000}, [{}]}, 0x78) 22:09:23 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:23 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1800000000000000}, [{}]}, 0x78) [ 346.683575][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:23 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:23 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0), 0x0, 0x0) 22:09:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:23 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:23 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1900000000000000}, [{}]}, 0x78) 22:09:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:23 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:23 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1a00000000000000}, [{}]}, 0x78) 22:09:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:23 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:23 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1b00000000000000}, [{}]}, 0x78) 22:09:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:24 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x1f00000000000000}, [{}]}, 0x78) 22:09:24 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2286, 0x0) 22:09:24 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:24 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:24 executing program 0: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2000000000000000}, [{}]}, 0x78) 22:09:24 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2286, 0x0) 22:09:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2209000000000000}, [{}]}, 0x78) 22:09:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:24 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881ff", 0x4c}], 0x1}, 0x0) 22:09:24 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2286, 0x0) 22:09:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2600000000000000}, [{}]}, 0x78) 22:09:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:24 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:24 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x2700000000000000}, [{}]}, 0x78) 22:09:24 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:25 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3000000000000000}, [{}]}, 0x78) 22:09:25 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881ff", 0x4c}], 0x1}, 0x0) 22:09:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:25 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 22:09:25 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2286, 0x0) 22:09:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3100000000000000}, [{}]}, 0x78) 22:09:25 executing program 0: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881ff", 0x4c}], 0x1}, 0x0) 22:09:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 22:09:25 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:25 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2286, 0x0) 22:09:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3e00000000000000}, [{}]}, 0x78) 22:09:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 22:09:25 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2286, 0x0) 22:09:25 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x3f00000000000000}, [{}]}, 0x78) 22:09:25 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 349.276730][T19186] FAULT_INJECTION: forcing a failure. [ 349.276730][T19186] name failslab, interval 1, probability 0, space 0, times 0 22:09:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x7f00000000000000}, [{}]}, 0x78) [ 349.357638][T19186] CPU: 0 PID: 19186 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 349.366434][T19186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.376585][T19186] Call Trace: [ 349.379924][T19186] dump_stack+0x18f/0x20d [ 349.384301][T19186] should_fail.cold+0x5/0x14 [ 349.388920][T19186] ? tomoyo_realpath_from_path+0xc3/0x620 [ 349.394658][T19186] should_failslab+0x5/0xf [ 349.399094][T19186] __kmalloc+0x27d/0x340 [ 349.403373][T19186] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 349.408944][T19186] tomoyo_realpath_from_path+0xc3/0x620 [ 349.414511][T19186] ? tomoyo_profile+0x42/0x50 [ 349.419218][T19186] tomoyo_path_number_perm+0x1cb/0x4d0 [ 349.424699][T19186] ? tomoyo_path_number_perm+0x183/0x4d0 [ 349.430357][T19186] ? tomoyo_execute_permission+0x470/0x470 [ 349.436306][T19186] ? find_held_lock+0x2d/0x110 22:09:26 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798817f", 0x4c}], 0x1}, 0x0) [ 349.436331][T19186] ? ksys_write+0x212/0x250 [ 349.436367][T19186] ? __mutex_unlock_slowpath+0xe2/0x610 22:09:26 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:26 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 349.436392][T19186] ? __fget_files+0x294/0x400 [ 349.436417][T19186] security_file_ioctl+0x50/0xb0 [ 349.436436][T19186] __do_compat_sys_ioctl+0x50/0x230 [ 349.436458][T19186] do_syscall_32_irqs_on+0x3f/0x60 22:09:26 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) [ 349.436475][T19186] do_fast_syscall_32+0x7f/0x120 [ 349.436493][T19186] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.436507][T19186] RIP: 0023:0xf7f54569 [ 349.436523][T19186] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 22:09:26 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 349.436531][T19186] RSP: 002b:00000000f5d4f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 22:09:26 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798819e", 0x4c}], 0x1}, 0x0) 22:09:26 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) [ 349.436547][T19186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002286 [ 349.436557][T19186] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 22:09:26 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 349.436567][T19186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.436575][T19186] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 22:09:26 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 22:09:26 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) [ 349.436584][T19186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.601137][T19198] FAULT_INJECTION: forcing a failure. [ 349.601137][T19198] name failslab, interval 1, probability 0, space 0, times 0 [ 349.601159][T19198] CPU: 0 PID: 19198 Comm: syz-executor.1 Not tainted 5.8.0-rc6-syzkaller #0 [ 349.601169][T19198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 22:09:26 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881f0", 0x4c}], 0x1}, 0x0) [ 349.601175][T19198] Call Trace: [ 349.601198][T19198] dump_stack+0x18f/0x20d [ 349.601219][T19198] should_fail.cold+0x5/0x14 [ 349.601241][T19198] ? tomoyo_realpath_from_path+0xc3/0x620 [ 349.601256][T19198] should_failslab+0x5/0xf [ 349.601272][T19198] __kmalloc+0x27d/0x340 [ 349.601289][T19198] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 349.601307][T19198] tomoyo_realpath_from_path+0xc3/0x620 [ 349.601323][T19198] ? tomoyo_profile+0x42/0x50 [ 349.601341][T19198] tomoyo_path_number_perm+0x1cb/0x4d0 [ 349.601355][T19198] ? tomoyo_path_number_perm+0x183/0x4d0 [ 349.601373][T19198] ? tomoyo_execute_permission+0x470/0x470 [ 349.601395][T19198] ? find_held_lock+0x2d/0x110 [ 349.601418][T19198] ? ksys_write+0x212/0x250 [ 349.601454][T19198] ? __mutex_unlock_slowpath+0xe2/0x610 [ 349.601477][T19198] ? __fget_files+0x294/0x400 [ 349.601498][T19198] security_file_ioctl+0x50/0xb0 [ 349.601515][T19198] __do_compat_sys_ioctl+0x50/0x230 [ 349.601535][T19198] do_syscall_32_irqs_on+0x3f/0x60 [ 349.601552][T19198] do_fast_syscall_32+0x7f/0x120 [ 349.601570][T19198] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.601581][T19198] RIP: 0023:0xf7f74569 [ 349.601595][T19198] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.601610][T19198] RSP: 002b:00000000f5d6f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 349.601625][T19198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002286 [ 349.601633][T19198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.601642][T19198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.601649][T19198] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 349.601657][T19198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.601678][T19198] ERROR: Out of memory at tomoyo_realpath_from_path. [ 349.749144][T19204] FAULT_INJECTION: forcing a failure. [ 349.749144][T19204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.749164][T19204] CPU: 0 PID: 19204 Comm: syz-executor.1 Not tainted 5.8.0-rc6-syzkaller #0 [ 349.749175][T19204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.749180][T19204] Call Trace: [ 349.749202][T19204] dump_stack+0x18f/0x20d [ 349.749224][T19204] should_fail.cold+0x5/0x14 [ 349.749248][T19204] __alloc_pages_nodemask+0x1a3/0x930 [ 349.749271][T19204] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 349.749298][T19204] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 349.749321][T19204] cache_grow_begin+0x8c/0xb20 [ 349.749339][T19204] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 349.749368][T19204] cache_alloc_refill+0x27b/0x340 [ 349.749385][T19204] ? lockdep_hardirqs_off+0x66/0xa0 [ 349.749408][T19204] ? tomoyo_realpath_from_path+0xc3/0x620 [ 349.749423][T19204] __kmalloc+0x319/0x340 [ 349.749446][T19204] tomoyo_realpath_from_path+0xc3/0x620 [ 349.749463][T19204] ? tomoyo_profile+0x42/0x50 [ 349.749481][T19204] tomoyo_path_number_perm+0x1cb/0x4d0 [ 349.749496][T19204] ? tomoyo_path_number_perm+0x183/0x4d0 [ 349.749514][T19204] ? tomoyo_execute_permission+0x470/0x470 [ 349.749530][T19204] ? find_held_lock+0x2d/0x110 [ 349.749553][T19204] ? ksys_write+0x212/0x250 [ 349.749587][T19204] ? __mutex_unlock_slowpath+0xe2/0x610 [ 349.749611][T19204] ? __fget_files+0x294/0x400 [ 349.749634][T19204] security_file_ioctl+0x50/0xb0 [ 349.749653][T19204] __do_compat_sys_ioctl+0x50/0x230 [ 349.749676][T19204] do_syscall_32_irqs_on+0x3f/0x60 [ 349.749695][T19204] do_fast_syscall_32+0x7f/0x120 [ 349.749714][T19204] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.749728][T19204] RIP: 0023:0xf7f74569 [ 349.749745][T19204] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.749753][T19204] RSP: 002b:00000000f5d6f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 349.749767][T19204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002286 [ 349.749776][T19204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.749784][T19204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.749792][T19204] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 349.749800][T19204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.836036][T19186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 349.914647][T19210] FAULT_INJECTION: forcing a failure. [ 349.914647][T19210] name failslab, interval 1, probability 0, space 0, times 0 [ 349.914667][T19210] CPU: 0 PID: 19210 Comm: syz-executor.1 Not tainted 5.8.0-rc6-syzkaller #0 [ 349.914677][T19210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.914681][T19210] Call Trace: [ 349.914701][T19210] dump_stack+0x18f/0x20d [ 349.914719][T19210] should_fail.cold+0x5/0x14 [ 349.914738][T19210] should_failslab+0x5/0xf [ 349.914755][T19210] kmem_cache_alloc_trace+0x240/0x2d0 [ 349.914774][T19210] sg_ioctl_common+0xe34/0x2700 [ 349.914796][T19210] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 349.914813][T19210] ? sg_write+0xa0/0xa0 [ 349.914830][T19210] ? generic_block_fiemap+0x60/0x60 [ 349.914849][T19210] ? __mutex_unlock_slowpath+0xe2/0x610 [ 349.914873][T19210] ? __fget_files+0x294/0x400 [ 349.914887][T19210] ? sg_ioctl_common+0x2700/0x2700 [ 349.914899][T19210] sg_compat_ioctl+0x93/0x120 [ 349.914912][T19210] ? sg_ioctl_common+0x2700/0x2700 [ 349.914928][T19210] __do_compat_sys_ioctl+0x1d3/0x230 [ 349.914947][T19210] do_syscall_32_irqs_on+0x3f/0x60 [ 349.914962][T19210] do_fast_syscall_32+0x7f/0x120 [ 349.914980][T19210] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 349.914991][T19210] RIP: 0023:0xf7f74569 [ 349.915005][T19210] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.915019][T19210] RSP: 002b:00000000f5d6f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 349.915031][T19210] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002286 [ 349.915039][T19210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.915046][T19210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.915054][T19210] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 349.915061][T19210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.053994][T19215] FAULT_INJECTION: forcing a failure. [ 350.053994][T19215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.054015][T19215] CPU: 1 PID: 19215 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 350.054024][T19215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.054029][T19215] Call Trace: [ 350.054050][T19215] dump_stack+0x18f/0x20d [ 350.054071][T19215] should_fail.cold+0x5/0x14 [ 350.054094][T19215] __alloc_pages_nodemask+0x1a3/0x930 [ 350.054115][T19215] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 350.054140][T19215] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 350.054161][T19215] cache_grow_begin+0x8c/0xb20 [ 350.054179][T19215] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 350.054196][T19215] cache_alloc_refill+0x27b/0x340 [ 350.054211][T19215] ? lockdep_hardirqs_off+0x66/0xa0 [ 350.054233][T19215] ? tomoyo_realpath_from_path+0xc3/0x620 [ 350.054249][T19215] __kmalloc+0x319/0x340 [ 350.054273][T19215] tomoyo_realpath_from_path+0xc3/0x620 [ 350.054291][T19215] ? tomoyo_profile+0x42/0x50 [ 350.054314][T19215] tomoyo_path_number_perm+0x1cb/0x4d0 [ 350.054329][T19215] ? tomoyo_path_number_perm+0x183/0x4d0 [ 350.054350][T19215] ? tomoyo_execute_permission+0x470/0x470 [ 350.054366][T19215] ? find_held_lock+0x2d/0x110 [ 350.054389][T19215] ? ksys_write+0x212/0x250 [ 350.054425][T19215] ? __mutex_unlock_slowpath+0xe2/0x610 [ 350.054449][T19215] ? __fget_files+0x294/0x400 [ 350.054481][T19215] security_file_ioctl+0x50/0xb0 [ 350.054501][T19215] __do_compat_sys_ioctl+0x50/0x230 [ 350.054525][T19215] do_syscall_32_irqs_on+0x3f/0x60 [ 350.054543][T19215] do_fast_syscall_32+0x7f/0x120 [ 350.054564][T19215] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 350.054577][T19215] RIP: 0023:0xf7f54569 [ 350.054594][T19215] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 350.054602][T19215] RSP: 002b:00000000f5d4f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 350.054617][T19215] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002286 [ 350.054626][T19215] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.054636][T19215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.054644][T19215] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 350.054654][T19215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.151769][T19221] FAULT_INJECTION: forcing a failure. [ 350.151769][T19221] name failslab, interval 1, probability 0, space 0, times 0 [ 351.010911][T19221] CPU: 1 PID: 19221 Comm: syz-executor.1 Not tainted 5.8.0-rc6-syzkaller #0 [ 351.019623][T19221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.029690][T19221] Call Trace: [ 351.033001][T19221] dump_stack+0x18f/0x20d [ 351.037358][T19221] should_fail.cold+0x5/0x14 [ 351.041974][T19221] should_failslab+0x5/0xf [ 351.046410][T19221] kmem_cache_alloc_trace+0x240/0x2d0 [ 351.051797][T19221] sg_ioctl_common+0xe34/0x2700 [ 351.056667][T19221] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 351.062553][T19221] ? sg_write+0xa0/0xa0 [ 351.066697][T19221] ? generic_block_fiemap+0x60/0x60 [ 351.071884][T19221] ? __mutex_unlock_slowpath+0xe2/0x610 [ 351.077447][T19221] ? __fget_files+0x294/0x400 [ 351.082196][T19221] ? sg_ioctl_common+0x2700/0x2700 [ 351.087292][T19221] sg_compat_ioctl+0x93/0x120 [ 351.091955][T19221] ? sg_ioctl_common+0x2700/0x2700 [ 351.097052][T19221] __do_compat_sys_ioctl+0x1d3/0x230 [ 351.102345][T19221] do_syscall_32_irqs_on+0x3f/0x60 [ 351.107445][T19221] do_fast_syscall_32+0x7f/0x120 [ 351.112371][T19221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 351.118681][T19221] RIP: 0023:0xf7f74569 [ 351.122732][T19221] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 351.143363][T19221] RSP: 002b:00000000f5d6f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 351.151757][T19221] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002286 [ 351.160166][T19221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.168118][T19221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 22:09:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x80ffffff00000000}, [{}]}, 0x78) 22:09:27 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0xa2, 0x2, 0x0, 0x0, "a82ecb933109f419edfaca9af763ce531910332d01f35f0d115ef621f6b7ac4241051cca41075c2e39053f328a9d60979ac1841f3c420dfefcc1ea498369ef45302544f184518323960e8aae9c7c25a13a30d0cbf9b0440d8f7712581a3f97c95829e080faf625d3512a22bb0498718ab468c666eee4a2b13e51e3a41a1183aa8dd8662e66410e0b856a"}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000e, 0x20010, r1, 0x10000000) r3 = io_uring_setup(0x1, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r4}}, 0x9) r6 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB='mangle\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/100], 0x64) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONTRESET(r8, 0x4b6d, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 22:09:27 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:27 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 351.176072][T19221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.184028][T19221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.258630][T19237] FAULT_INJECTION: forcing a failure. [ 351.258630][T19237] name failslab, interval 1, probability 0, space 0, times 0 [ 351.308108][T19237] CPU: 1 PID: 19237 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 351.316810][T19237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.326866][T19237] Call Trace: [ 351.330149][T19237] dump_stack+0x18f/0x20d [ 351.334467][T19237] should_fail.cold+0x5/0x14 [ 351.339045][T19237] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 351.344402][T19237] should_failslab+0x5/0xf [ 351.348804][T19237] __kmalloc+0x27d/0x340 [ 351.353034][T19237] ? tomoyo_realpath_from_path+0xc3/0x620 [ 351.358743][T19237] tomoyo_encode2.part.0+0xe9/0x3a0 [ 351.363941][T19237] ? tomoyo_realpath_from_path+0xc3/0x620 [ 351.369651][T19237] tomoyo_encode+0x28/0x50 [ 351.374060][T19237] tomoyo_realpath_from_path+0x186/0x620 [ 351.379701][T19237] tomoyo_path_number_perm+0x1cb/0x4d0 [ 351.385146][T19237] ? tomoyo_path_number_perm+0x183/0x4d0 [ 351.390807][T19237] ? tomoyo_execute_permission+0x470/0x470 [ 351.396607][T19237] ? find_held_lock+0x2d/0x110 [ 351.401364][T19237] ? ksys_write+0x212/0x250 [ 351.405955][T19237] ? __mutex_unlock_slowpath+0xe2/0x610 [ 351.411500][T19237] ? __fget_files+0x294/0x400 [ 351.416192][T19237] security_file_ioctl+0x50/0xb0 [ 351.421119][T19237] __do_compat_sys_ioctl+0x50/0x230 [ 351.426311][T19237] do_syscall_32_irqs_on+0x3f/0x60 [ 351.431419][T19237] do_fast_syscall_32+0x7f/0x120 [ 351.436351][T19237] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 351.442663][T19237] RIP: 0023:0xf7f54569 [ 351.446835][T19237] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 351.466438][T19237] RSP: 002b:00000000f5d4f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 351.474838][T19237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002286 [ 351.482796][T19237] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.490755][T19237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.499146][T19237] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 22:09:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) [ 351.507204][T19237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 22:09:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000180)={0xa1, 0x3, 0x89, 0x6, &(0x7f0000000040)=[{0x9, 0x0, 0x5}, {0x1f, 0x81, 0xfd86, 0x6}, {0x120, 0x6, 0x4, 0xfff}, {0x1, 0x1, 0x800, 0xfa95}, {0x2, 0x0, 0xb900, 0xcc43}, {0x9, 0x1, 0x9, 0x2}]}) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:28 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881ff", 0x4c}], 0x1}, 0x0) 22:09:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:28 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 351.746620][T19237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.968036][T19263] FAULT_INJECTION: forcing a failure. [ 351.968036][T19263] name failslab, interval 1, probability 0, space 0, times 0 [ 352.038195][T19263] CPU: 0 PID: 19263 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 352.046997][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.057062][T19263] Call Trace: [ 352.060372][T19263] dump_stack+0x18f/0x20d [ 352.064736][T19263] should_fail.cold+0x5/0x14 [ 352.069349][T19263] should_failslab+0x5/0xf [ 352.073790][T19263] kmem_cache_alloc_trace+0x240/0x2d0 [ 352.079190][T19263] sg_ioctl_common+0xe34/0x2700 [ 352.084063][T19263] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 352.089972][T19263] ? sg_write+0xa0/0xa0 [ 352.094148][T19263] ? generic_block_fiemap+0x60/0x60 [ 352.099372][T19263] ? __mutex_unlock_slowpath+0xe2/0x610 [ 352.104938][T19263] ? __fget_files+0x294/0x400 [ 352.109631][T19263] ? sg_ioctl_common+0x2700/0x2700 [ 352.114758][T19263] sg_compat_ioctl+0x93/0x120 [ 352.119441][T19263] ? sg_ioctl_common+0x2700/0x2700 [ 352.124567][T19263] __do_compat_sys_ioctl+0x1d3/0x230 [ 352.129872][T19263] do_syscall_32_irqs_on+0x3f/0x60 [ 352.135000][T19263] do_fast_syscall_32+0x7f/0x120 [ 352.140064][T19263] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 352.146401][T19263] RIP: 0023:0xf7f54569 [ 352.150486][T19263] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 352.170132][T19263] RSP: 002b:00000000f5d4f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 352.178561][T19263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002286 22:09:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x9bffffff00000000}, [{}]}, 0x78) 22:09:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x7fff, 0x4664c3) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x3a, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000000040)="ca8b5916a997cfed169b0b6eea2185308067201857f53e1c30c6f2da76a8ca972c80a9a42ddfc7397a3401c23b458824c1037a7ad9d352ebc81b", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uhid(0xffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x400, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4004556c, &(0x7f0000000340)='syz1\x00') sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) mq_notify(r4, &(0x7f0000000300)={0x0, 0x10, 0x0, @tid=r5}) bind$rxrpc(r3, &(0x7f0000000240)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @local, 0x7}}, 0x24) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000400)={0x8, 0x0, [], {0x0, @bt={0x9, 0x1, 0x1, 0x0, 0x8001, 0x4, 0x1, 0xff, 0x5, 0xffffffff, 0x801, 0x401, 0x6d4bc8d8, 0x1, 0x11, 0x8, {0x6, 0x7}, 0x5, 0x4}}}) 22:09:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2, 0x0) [ 352.186550][T19263] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.194531][T19263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.202513][T19263] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 352.210494][T19263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 22:09:28 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) [ 352.290386][T19276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 22:09:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x10, 0x0) 22:09:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) [ 352.380239][T19276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x4) 22:09:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:29 executing program 0 (fault-call:1 fault-nth:4): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x1a, &(0x7f0000000040)=""/26}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x2}, [{}]}, 0x78) 22:09:29 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, 0x0) 22:09:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3}, [{}]}, 0x78) 22:09:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:29 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1275, 0x0) 22:09:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x4}, [{}]}, 0x78) 22:09:29 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000180)=0x8, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 352.964021][T19321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1276, 0x0) 22:09:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x5}, [{}]}, 0x78) 22:09:29 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 353.190555][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2201, 0x0) 22:09:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x3e, 0x0, @buffer={0x0, 0x0, &(0x7f0000000280)=""/229}, &(0x7f0000000000)="b8cb2c1fcd4d49a5f761d222f0b21d82a3b5c76338639d424a7f440281ef6986fb729357fff891745246e2db9b7d5affaee8946d75a21789712b8aefd074", 0x0, 0x7fffffff, 0x0, 0x0, 0x0}) 22:09:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x7}, [{}]}, 0x78) 22:09:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:30 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2202, 0x0) [ 353.436848][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x8}, [{}]}, 0x78) 22:09:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2203, 0x0) 22:09:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1275, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 353.647603][T19368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x9}, [{}]}, 0x78) 22:09:30 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1276, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2205, 0x0) 22:09:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xa}, [{}]}, 0x78) [ 353.881537][T19381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:30 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x26a7, r2, &(0x7f0000001280)="cbd118a45538ac55d327275a2f062de348af814868123760267849efc8d7df2447b938a86412d3a0f9f6fb2f3ecef5ffc2a2d1744f19ae1586cf654f10b5d3798d8e328aeb9a9900ad724fbdf9988b543bba8c2308749788c1c09445526168d4899a3e35f3d38e01dd7982fc3507546b909f3fc3ba48fdfb4f5b76784718ec25d470bd7046407257e83c", 0x8a, 0x2c0, 0x0, 0x3, r3}, &(0x7f0000001340)) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000002c0)={r6, 0x3}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f00000000c0)={r6, 0x10}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4008641c, &(0x7f0000000040)={r6, &(0x7f0000000280)=""/4096}) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2270, 0x0) 22:09:30 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xb}, [{}]}, 0x78) [ 354.160119][T19396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, 0x0) 22:09:30 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x28e00, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x109700, 0x1c3, 0xa}, 0x18) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x800c4151, &(0x7f0000000180)={0x0, &(0x7f0000000380)="447ed316cf3ebd67f60bb779ceb3822873448b1f5d83bae91e1fad5f38f48bd02107bcbc16741a9f2710f1f0f085f81621a96e5e48265059b91856afc6ee474c10592a276153dceda05126cc2f86d5692c74fafdce1f75fbbe53638855e77b956a7eb6efac49cd8b6d863c38fca7277f02c3c58e1ca74b383bc57c1ca84f8b611fe4890ac0e325d3a12695bde4a942d50fa369405027d678ec3ba94175c9b6d746d43945e3240f0edb2b0c0cc215a6921c0ad8ffe2a2539cfe1e28c5565fdafb6498444d2e9826b100ec45a315c03c5fa3377040399ba02d1c865f6aa11ef672fe705aa5da4295e8911153b7f44029f7227f34b665c8b8fe4f16ac36b425260712f149a266743e83a2bc34d28e41af76f97317e341ed1ba9b9ef812c6ad8f1e5ba4da1d775897b55877681a2d00d26a4", 0x130}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2202, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xc}, [{}]}, 0x78) 22:09:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2272, 0x0) [ 354.462369][T19412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2203, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:31 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, 0x0) 22:09:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = getpgrp(0x0) setpriority(0x0, r1, 0x2) openat$vhost_vsock(0xffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) wait4(r1, &(0x7f0000000040), 0x8, &(0x7f0000000280)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xd}, [{}]}, 0x78) 22:09:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xe}, [{}]}, 0x78) [ 354.743348][T19432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2205, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:31 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2276, 0x0) 22:09:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) 22:09:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xf}, [{}]}, 0x78) 22:09:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2270, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c8d80, 0x1c) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000200)={0x6, &(0x7f0000000180)=[{0x2, 0x9}, {0xfd2c, 0x7}, {0x3d, 0x6}, {0xff13, 0xfc00}, {0x1f, 0x5}, {0x0, 0x401}]}) 22:09:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2279, 0x0) 22:09:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x15}, [{}]}, 0x78) 22:09:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:09:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:31 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3e1e, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2b) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="ce0000000200000005000000dfbf02123d88943292c2861df9312c8a010400000000c4199f65e367f089766c509d37facc6a3168b30b2caff1f2b2a4f5f58065d3f55316ade34e96d5298d5a95c36fbad823382881f2b7e960d67fe13ca612b89346d28a47c0a657b2ed3706c5aaba2067477c895a5ac3e7c4327a0271a908d52a548788e069a4d8a8d2b0844b43f3e3b7de2fc70b02e3a1a90235ccf72495db7cb56294ab25cd66fa0de851e6a3262a6f6f32cf11ee9151a98654f1bdcb35d41fc430c3228d808120b16401f453a8d754c025b179f6f58f243a"]) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xffffffd8}]}, &(0x7f0000001280), 0x0, 0x0, 0x20, 0x0, 0x0}) 22:09:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227a, 0x0) 22:09:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x16}, [{}]}, 0x78) 22:09:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2272, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:09:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227b, 0x0) 22:09:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x17}, [{}]}, 0x78) 22:09:32 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:32 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x20) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:32 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 22:09:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227c, 0x0) 22:09:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x18}, [{}]}, 0x78) 22:09:32 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x93, &(0x7f0000000200)=""/147}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:32 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227d, 0x0) 22:09:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2276, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x19}, [{}]}, 0x78) 22:09:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227e, 0x0) 22:09:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2279, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227f, 0x0) 22:09:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1a}, [{}]}, 0x78) 22:09:32 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:32 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf80000000109021200010000000509040001002e5d8be6"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x24, &(0x7f00000000c0)={0x20, 0x17, 0xa5, "17d406ab5bc1fc708cccc7b4213d33440e2f8a0b4e6475d630772e35a7587cf57def489df947aa0a49111bb0ce49c2bba89eeb80755571005f20a8af0bbc8d5d2e9075a3a27c5f228e84d39b8d7c9bafd7d2ece456c77bb00fde94b3b2164a8a0d6be47c92e7e075bdcf71096fcce7a02bcf6b720746f2ba4ed4db8a04da689bed5fd1fc026f8281780f7da6470e96d80c08caa68b696faed83e4abf6a4c5006909041aa87"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xb0}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x5, 0xfffb, 0x4, 0x7, 0x1, 0x187, 0x8001, 0x1000, 0x6, 0x7ff, 0xf56, 0x9}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000080)={0x1000, 0x2000, 0x400, 0x40, 0x64d}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0xac, 0x0, @buffer={0x0, 0xb6, &(0x7f0000000340)=""/182}, &(0x7f0000000280)="317e0a3a35ce1d1ca76078c762ba0dbafc363be347c20a4d6388f510648d11ea7ba5f2b446f40af97e7f975ccbb9e2a854753b99506276e7bfba9a9390b36e519fb6a2cda3dc6a1e2023ce902a8881dfd43fd43de1e5cd7f7807a3654514ab60998604fb7d1e57afdbd60eb3e058b59b2d1784c1ae408aaf09980fbfa52d17988cb598aec4ef39b943cfa398ede340a56c401e0636f0cfe6a061596b3d35402ff44196223950df6ab1940fd0", 0x0, 0x0, 0x10000, 0x0, 0x0}) 22:09:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1b}, [{}]}, 0x78) 22:09:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2282, 0x0) 22:09:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x26}, [{}]}, 0x78) 22:09:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2283, 0x0) 22:09:32 executing program 5: ioctl$SG_IO(0xffffffffffffffff, 0x1267, 0x0) 22:09:33 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 356.416232][ T3811] usb 5-1: new high-speed USB device number 2 using dummy_hcd 22:09:33 executing program 5: ioctl$SG_IO(0xffffffffffffffff, 0x1267, 0x0) [ 356.787048][ T3811] usb 5-1: config 0 interface 0 has no altsetting 0 [ 356.793738][ T3811] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 356.812018][ T3811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.830916][ T3811] usb 5-1: config 0 descriptor?? [ 357.176309][ T3811] usb 5-1: string descriptor 0 read error: -71 [ 357.206600][ T3811] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 357.217716][ T3811] asix: probe of 5-1:0.0 failed with error -71 [ 357.225939][ T3811] usb 5-1: USB disconnect, device number 2 22:09:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xe6, 0x4, @buffer={0x0, 0x5a, &(0x7f0000000280)=""/90}, &(0x7f0000000300)="fc0bd6e2f97a306da1aaa298f0af58777bfbd78ffc93be899ac5f330848e776cb59dcf065e347ae1eebc738cfd84fb5e1a1eb9d883000e534c2ce54cdda17d6e8a0af8cc184c3d9c91ad33e35449eac41d9fd402f9d9cc80f1032b3e51be397b3af260bfc4d7d9cf034f7e35a4a60ee20b9eeab22bd3838738076d48b41a0f42a951c951e6bf7508a52a1ca2abccc4af053bfa3161068eadafc4de3a98b40cec1201435adf533775bd7cbf85d9308dfab7ba77b072a05e758abb6eab90820ba9799b85a2e856554af5ece5d3db106c15a3b78cc560cfbd5a1b858a05d0825d01bd3634079ec1", &(0x7f0000000400)=""/108, 0x6, 0x926457640c19181b, 0x0, &(0x7f0000000180)}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x5c}}, 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 22:09:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, 0x0) 22:09:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x27}, [{}]}, 0x78) 22:09:34 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:34 executing program 5: ioctl$SG_IO(0xffffffffffffffff, 0x1267, 0x0) 22:09:34 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x30}, [{}]}, 0x78) 22:09:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 22:09:34 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x31}, [{}]}, 0x78) 22:09:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x501080, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x29cf01, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000200)={0x88, 0x4, 0x1, 0x0, 0x0, [@private2, @mcast2]}, 0x28) userfaultfd(0x80800) 22:09:34 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2287, 0x0) 22:09:34 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3e}, [{}]}, 0x78) 22:09:34 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2288, 0x0) 22:09:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2282, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000180)=0x8) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000002c0)=0x200, &(0x7f0000000300)=0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x180}, [{}]}, 0x78) 22:09:34 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0xf}], 0x1}, 0x0) 22:09:35 executing program 5: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x1267, 0x0) [ 358.417505][T19644] __nla_validate_parse: 5 callbacks suppressed [ 358.417516][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2289, 0x0) 22:09:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x300}, [{}]}, 0x78) 22:09:35 executing program 5: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x1267, 0x0) 22:09:35 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0xc0}], 0x1}, 0x0) 22:09:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2283, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 358.579867][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:35 executing program 4: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000180)=0x8) r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000200)=0x400) 22:09:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4c01, 0x0) 22:09:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x500}, [{}]}, 0x78) 22:09:35 executing program 5: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x1267, 0x0) 22:09:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:35 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0xec0}], 0x1}, 0x0) 22:09:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5382, 0x0) 22:09:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = pidfd_getfd(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0e05403, &(0x7f0000000000)={{0x0, 0x3, 0x1, 0x1, 0x8}, 0x40, 0x5, 'id1\x00', 'timer1\x00', 0x0, 0x5, 0x9, 0x4, 0xfffffffc}) 22:09:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x700}, [{}]}, 0x78) 22:09:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:35 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, 0x0) 22:09:35 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x33fe0}], 0x1}, 0x0) [ 359.087312][T19695] FAULT_INJECTION: forcing a failure. [ 359.087312][T19695] name failslab, interval 1, probability 0, space 0, times 0 22:09:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x900}, [{}]}, 0x78) 22:09:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2287, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 359.175663][T19695] CPU: 0 PID: 19695 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 359.184382][T19695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.194451][T19695] Call Trace: [ 359.197760][T19695] dump_stack+0x18f/0x20d [ 359.202117][T19695] should_fail.cold+0x5/0x14 [ 359.206734][T19695] ? tomoyo_realpath_from_path+0xc3/0x620 [ 359.212482][T19695] should_failslab+0x5/0xf [ 359.216954][T19695] __kmalloc+0x27d/0x340 [ 359.216974][T19695] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 359.216996][T19695] tomoyo_realpath_from_path+0xc3/0x620 [ 359.217014][T19695] ? tomoyo_profile+0x42/0x50 [ 359.217034][T19695] tomoyo_path_number_perm+0x1cb/0x4d0 [ 359.217049][T19695] ? tomoyo_path_number_perm+0x183/0x4d0 [ 359.217067][T19695] ? tomoyo_execute_permission+0x470/0x470 [ 359.217082][T19695] ? find_held_lock+0x2d/0x110 [ 359.217104][T19695] ? ksys_write+0x212/0x250 [ 359.217138][T19695] ? __mutex_unlock_slowpath+0xe2/0x610 [ 359.217161][T19695] ? __fget_files+0x294/0x400 [ 359.217183][T19695] security_file_ioctl+0x50/0xb0 [ 359.217209][T19695] __do_compat_sys_ioctl+0x50/0x230 [ 359.217238][T19695] do_syscall_32_irqs_on+0x3f/0x60 [ 359.289123][T19695] do_fast_syscall_32+0x7f/0x120 [ 359.289143][T19695] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 359.289155][T19695] RIP: 0023:0xf7fe1569 [ 359.289170][T19695] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 22:09:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0xff, 0x2, 0x2, &(0x7f0000ffe000/0x1000)=nil, 0xff}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:35 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x7ffff}], 0x1}, 0x0) [ 359.289178][T19695] RSP: 002b:00000000f5ddc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 359.289197][T19695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001267 [ 359.289205][T19695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.289213][T19695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.289221][T19695] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 359.289238][T19695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 22:09:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, 0x0) 22:09:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x922}, [{}]}, 0x78) 22:09:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2288, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:36 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x2000008c}], 0x1}, 0x0) 22:09:36 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x7ffff000}], 0x1}, 0x0) 22:09:36 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:36 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2289, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x541b, 0x0) 22:09:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xa00}, [{}]}, 0x78) 22:09:36 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x2}, 0x0) [ 359.831280][T19695] ERROR: Out of memory at tomoyo_realpath_from_path. 22:09:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xb00}, [{}]}, 0x78) 22:09:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5421, 0x0) [ 360.028331][T19743] FAULT_INJECTION: forcing a failure. [ 360.028331][T19743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.041572][T19743] CPU: 1 PID: 19743 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 360.050257][T19743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.060412][T19743] Call Trace: [ 360.063727][T19743] dump_stack+0x18f/0x20d [ 360.068088][T19743] should_fail.cold+0x5/0x14 [ 360.072716][T19743] __alloc_pages_nodemask+0x1a3/0x930 [ 360.078116][T19743] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 360.085000][T19743] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 360.091011][T19743] cache_grow_begin+0x8c/0xb20 [ 360.095807][T19743] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 360.101294][T19743] cache_alloc_refill+0x27b/0x340 [ 360.106336][T19743] ? lockdep_hardirqs_off+0x66/0xa0 [ 360.111729][T19743] ? tomoyo_realpath_from_path+0xc3/0x620 [ 360.117469][T19743] __kmalloc+0x319/0x340 [ 360.121827][T19743] tomoyo_realpath_from_path+0xc3/0x620 [ 360.127397][T19743] ? tomoyo_profile+0x42/0x50 [ 360.132101][T19743] tomoyo_path_number_perm+0x1cb/0x4d0 [ 360.137583][T19743] ? tomoyo_path_number_perm+0x183/0x4d0 [ 360.143281][T19743] ? tomoyo_execute_permission+0x470/0x470 [ 360.149118][T19743] ? find_held_lock+0x2d/0x110 [ 360.153906][T19743] ? ksys_write+0x212/0x250 [ 360.158459][T19743] ? __mutex_unlock_slowpath+0xe2/0x610 [ 360.164033][T19743] ? __fget_files+0x294/0x400 [ 360.168748][T19743] security_file_ioctl+0x50/0xb0 [ 360.173726][T19743] __do_compat_sys_ioctl+0x50/0x230 [ 360.178954][T19743] do_syscall_32_irqs_on+0x3f/0x60 [ 360.184090][T19743] do_fast_syscall_32+0x7f/0x120 [ 360.189051][T19743] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 360.195396][T19743] RIP: 0023:0xf7fe1569 [ 360.199483][T19743] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 360.219359][T19743] RSP: 002b:00000000f5ddc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 22:09:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0xab, 0x0, @scatter={0x0, 0xc1}, &(0x7f0000000280)="c5ab1481304c9ce939156793ae9af42552bdd9c07ab8290917a0b4148343c31927451b79391c6576116a11df11d7c77d08d02310dc55f1c9f602d0beee15f17bb89a56e892a801a22b2b3796e260d146b758b9afb8822d3d7603362f2788618ace233b851c5c4de386874c7589b27d0cfecdd226be9f240bff5ebdeb96c726042dd1883505585dee70d397f62f7fd4c251ec10888ed82617beea6f797ad0dfe016758d2b712849923dee9c", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x147, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000180)="009a653d202ffbb755a5", 0xa, r3) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r2, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000000)={{0x3, 0x0, @identifier="14f40c3db7427604750addc99abc282d"}, 0x39, r4, [], "98c4fd5dedeefeee82783ea5c1515aa9a2d5b5ca64090e2b924360702cc306ad7080d528181f04d436ffde496ffc93c73bccd09be197fca363"}) 22:09:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4c01, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 360.227785][T19743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001267 [ 360.235770][T19743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.243757][T19743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.251758][T19743] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 360.259749][T19743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 22:09:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xc00}, [{}]}, 0x78) 22:09:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5382, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:37 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:37 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x5}, 0x0) 22:09:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5450, 0x0) 22:09:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x40, 0x4}, 0x10) 22:09:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xd00}, [{}]}, 0x78) 22:09:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5451, 0x0) [ 360.674805][T19774] FAULT_INJECTION: forcing a failure. [ 360.674805][T19774] name failslab, interval 1, probability 0, space 0, times 0 22:09:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xe00}, [{}]}, 0x78) 22:09:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 360.782166][T19774] CPU: 1 PID: 19774 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 360.790882][T19774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.800945][T19774] Call Trace: [ 360.804253][T19774] dump_stack+0x18f/0x20d [ 360.808607][T19774] should_fail.cold+0x5/0x14 [ 360.813231][T19774] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 360.818616][T19774] should_failslab+0x5/0xf [ 360.823056][T19774] __kmalloc+0x27d/0x340 [ 360.827315][T19774] ? tomoyo_realpath_from_path+0xc3/0x620 [ 360.833058][T19774] tomoyo_encode2.part.0+0xe9/0x3a0 [ 360.838272][T19774] ? tomoyo_realpath_from_path+0xc3/0x620 [ 360.844018][T19774] tomoyo_encode+0x28/0x50 [ 360.848457][T19774] tomoyo_realpath_from_path+0x186/0x620 [ 360.854111][T19774] tomoyo_path_number_perm+0x1cb/0x4d0 [ 360.859586][T19774] ? tomoyo_path_number_perm+0x183/0x4d0 [ 360.865249][T19774] ? tomoyo_execute_permission+0x470/0x470 [ 360.871073][T19774] ? find_held_lock+0x2d/0x110 [ 360.875870][T19774] ? ksys_write+0x212/0x250 [ 360.880405][T19774] ? __mutex_unlock_slowpath+0xe2/0x610 [ 360.885978][T19774] ? __fget_files+0x294/0x400 [ 360.890774][T19774] security_file_ioctl+0x50/0xb0 [ 360.895734][T19774] __do_compat_sys_ioctl+0x50/0x230 [ 360.900960][T19774] do_syscall_32_irqs_on+0x3f/0x60 [ 360.906092][T19774] do_fast_syscall_32+0x7f/0x120 [ 360.911049][T19774] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 360.917386][T19774] RIP: 0023:0xf7fe1569 [ 360.921467][T19774] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 360.941168][T19774] RSP: 002b:00000000f5ddc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 360.949597][T19774] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001267 [ 360.957666][T19774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.965650][T19774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.973634][T19774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 22:09:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, 0x0) 22:09:37 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x8}, 0x0) [ 360.981623][T19774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 22:09:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000001080)='fou\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000001080)='fou\x00') sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, r5, 0x29, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, r5, 0x29, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x8041) [ 361.093459][T19787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.107632][T19774] ERROR: Out of memory at tomoyo_realpath_from_path. 22:09:37 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xf00}, [{}]}, 0x78) 22:09:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x541b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5460, 0x0) 22:09:37 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x300}, 0x0) 22:09:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x6364, 0x0) 22:09:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000280)={0x1ff, 0x4, &(0x7f0000000040)=[0x8, 0x8, 0x5, 0xff], &(0x7f0000000180)=[0x7, 0xca13, 0x1e2, 0xb9ec], &(0x7f0000000200)}) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5421, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1500}, [{}]}, 0x78) 22:09:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x8912, 0x0) 22:09:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1600}, [{}]}, 0x78) 22:09:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5450, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x42000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x9, [0xff00, 0x9, 0x3, 0x0, 0xfb7, 0x9, 0x44a, 0xfffe, 0x400]}, 0x16) 22:09:38 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x7ffff}, 0x0) 22:09:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2, 0x0) 22:09:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x8923, 0x0) 22:09:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5451, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x10, 0x0) 22:09:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1700}, [{}]}, 0x78) 22:09:38 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x7ffffffd, 0x7fff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x810, r0, 0x8000000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) 22:09:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x8933, 0x0) 22:09:38 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0xffffff1f}, 0x0) 22:09:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x125c, 0x0) 22:09:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) 22:09:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1800}, [{}]}, 0x78) 22:09:38 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x89f0, 0x0) 22:09:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5460, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1900}, [{}]}, 0x78) 22:09:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1274, 0x0) 22:09:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0xfffffffd, 0x0}) 22:09:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5501, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xae01, 0x0) 22:09:38 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x2}, 0x0) 22:09:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1a00}, [{}]}, 0x78) 22:09:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x140e, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4, &(0x7f00000002c0)="7e620f2645758c5b11b72cf8c493024b2b08f56c8fb5b6ef842a0be85e65182fae410112470532606407afc6d934c8b6dc797b9bfb31939fdbc788aef13fd52081db0995aebf592d093b7f683be0") ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x8025, 0x0, 0x0}) 22:09:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1275, 0x0) 22:09:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5509, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xae41, 0x0) 22:09:39 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x3}, 0x0) 22:09:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1b00}, [{}]}, 0x78) 22:09:39 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x9) r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x4, 0xc1, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000480)}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000340)) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082cbd7000fddbdf251b00000000009a00010000000600610062000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1b8, r6, 0x308, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x4ca}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x200}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xde}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xaab1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xffff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xffff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 22:09:39 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x4}, 0x0) 22:09:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x6364, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xae60, 0x0) 22:09:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1276, 0x0) 22:09:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1f00}, [{}]}, 0x78) [ 362.714580][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:39 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x8}, 0x0) 22:09:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x8912, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x400454ca, 0x0) 22:09:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2201, 0x0) [ 362.838098][T19907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x8933, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:39 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xe}, 0x0) 22:09:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x2000}, [{}]}, 0x78) 22:09:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40049409, 0x0) 22:09:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2202, 0x0) 22:09:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40086602, 0x0) 22:09:39 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x60}, 0x0) 22:09:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x8947, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x2209}, [{}]}, 0x78) 22:09:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4008ae89, 0x0) 22:09:39 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xf0}, 0x0) 22:09:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2203, 0x0) 22:09:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xae01, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40186366, 0x0) 22:09:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x2600}, [{}]}, 0x78) 22:09:40 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x141}, 0x0) 22:09:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x400454ca, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2205, 0x0) 22:09:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4020940d, 0x0) 22:09:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x2700}, [{}]}, 0x78) 22:09:40 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x300}, 0x0) 22:09:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40045506, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2270, 0x0) 22:09:40 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xe00}, 0x0) 22:09:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4020ae46, 0x0) 22:09:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3000}, [{}]}, 0x78) 22:09:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4004550a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, 0x0) 22:09:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4020ae76, 0x0) 22:09:40 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xec0}, 0x0) 22:09:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40186417, &(0x7f00000002c0)={0x1, 0x80000000, 0x6, 0x5cdb1d8a, 0x14, 0x3}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x48, r5, 0x100, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x400}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3100}, [{}]}, 0x78) 22:09:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2272, 0x0) 22:09:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40049409, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:40 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x1f00}, 0x0) [ 364.130909][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c5828, 0x0) 22:09:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3e00}, [{}]}, 0x78) 22:09:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40085503, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 364.229350][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, 0x0) 22:09:40 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x3f00}, 0x0) 22:09:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/191, 0xbf}]}, &(0x7f0000001280), 0x0, 0x0, 0x26, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x200, 0x3ff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000280)={0xffff7fff, 0x9, 0x3c, "10ee3d48717c5c691e4ee21298276c7b1a71354e245c547a1d14f0ba07977520e03d6433e50160bbe8abb48f243d7bd52bfbd2ad0a4490cd55c6864b", 0x2e, "5b9e86646bf80df52d4c2b04b4770f8d98bfa75293964bbe36d2ed8f7c48ee63a634803568d9403e7c8434bc34a2b1ce0eb53ce5337d279a374ea09e", 0x90}) r3 = openat$sequencer(0xffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x109000, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80805659, &(0x7f0000000340)={0x0, @src_change}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$ASHMEM_SET_SIZE(r2, 0x40047703, 0x6) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000140)={0x2, 0x0, 0x3002, 0x3f, 0x811a, {0x2162, 0x33254723}}) 22:09:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3f00}, [{}]}, 0x78) 22:09:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c5829, 0x0) 22:09:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40095505, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2276, 0x0) 22:09:41 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x4101}, 0x0) 22:09:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c582a, 0x0) 22:09:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x7f00}, [{}]}, 0x78) 22:09:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2279, 0x0) 22:09:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40186366, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1000000}, [{}]}, 0x78) 22:09:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227a, 0x0) 22:09:41 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x41d0}, 0x0) 22:09:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c582b, 0x0) 22:09:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4020940d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227b, 0x0) 22:09:41 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x6000}, 0x0) 22:09:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1800000}, [{}]}, 0x78) 22:09:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c5839, 0x0) 22:09:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x2000000}, [{}]}, 0x78) 22:09:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227c, 0x0) 22:09:41 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xc00e}, 0x0) 22:09:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4400ae8f, 0x0) 22:09:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c5829, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3000000}, [{}]}, 0x78) 22:09:41 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xd041}, 0x0) 22:09:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227d, 0x0) 22:09:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x80045643, 0x0) 22:09:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x4000000}, [{}]}, 0x78) 22:09:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c582a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:42 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xf000}, 0x0) 22:09:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x5000000}, [{}]}, 0x78) 22:09:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227e, 0x0) 22:09:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x80086301, 0x0) 22:09:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c582b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:42 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x34000}, 0x0) 22:09:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, 0x0) 22:09:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227f, 0x0) 22:09:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x7000000}, [{}]}, 0x78) 22:09:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c5839, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:42 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x7ffff}, 0x0) 22:09:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x8000000}, [{}]}, 0x78) 22:09:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2282, 0x0) 22:09:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, 0x0) 22:09:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x41015500, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x9000000}, [{}]}, 0x78) 22:09:42 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x400300}, 0x0) 22:09:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, 0x0) 22:09:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2283, 0x0) 22:09:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x80045301, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xa000000}, [{}]}, 0x78) 22:09:42 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xf0ffff}, 0x0) 22:09:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0205647, 0x0) 22:09:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, 0x0) 22:09:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x80085502, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:43 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x1000000}, 0x0) 22:09:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xb000000}, [{}]}, 0x78) 22:09:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc020660b, 0x0) 22:09:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 22:09:43 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x2000000}, 0x0) 22:09:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x80086301, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0481273, 0x0) 22:09:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xc000000}, [{}]}, 0x78) 22:09:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:43 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x3000000}, 0x0) 22:09:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:43 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400202) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x1f, 0x7ffb}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x48000, 0x0) ioctl$SG_IO(r2, 0x2286, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="ae175cd5", @ANYRES16=r4, @ANYBLOB="0000000000000000000001000000ffffffff08410000001400180000e6587564703a73797a3000000000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r4, 0x0, 0x0, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xf5a, 0x7, 0x2157}}}, ["", "", "", ""]}, 0x30}}, 0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x8011) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x15, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000096880c3e2ab020dc900009000100706c7567000000000300ff3657b90f676930000000"], 0x3c}}, 0x0) bind$qrtr(r7, &(0x7f0000000040)={0x2a, 0x2, 0x8000}, 0xc) 22:09:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$zero(0xffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x101}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x48, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf20}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x6, 0x1f, 0x1, 0x8]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe2}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vcs(0xffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000024000b0f00000000007743b01380f3b942758c2973defecd00000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000009000100706c756700000000030002000000000000000000"], 0x3c}}, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={[], 0x21}}, 0x14) [ 367.115866][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 367.207020][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 367.245593][T20173] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2287, 0x0) 22:09:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xd000000}, [{}]}, 0x78) 22:09:43 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x4000000}, 0x0) [ 367.326299][T20178] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000400}) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x40102, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fe) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000040)) r5 = openat$dlm_plock(0xffffff9c, 0x0, 0x8100, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000005c0)={'bridge_slave_1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0000000000000000000001000000ffffffff08410000001400180000e6587564703a73797a3000000000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x0, 0xf5a, 0x7, 0x2157}}}, ["", "", "", ""]}, 0x30}}, 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7fff, 0x37, 0xff, 0x758cab9f}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x30, 0xffffffffffffffff, 0x0) 22:09:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0085504, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x224000, 0x0) r2 = openat$dlm_plock(0xffffff9c, 0x0, 0x8100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="ead81e00297866", @ANYRES16=r4, @ANYBLOB="0000000000000000000001000000ffffffff08410000001400180000e6587564703a73797a3000000000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r4, 0x0, 0x0, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xf5a, 0x7, 0x2157}}}, ["", "", "", ""]}, 0x30}}, 0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x404, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4000010) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2288, 0x0) 22:09:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x8000000}, 0x0) 22:09:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xe000000}, [{}]}, 0x78) 22:09:44 executing program 4: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) write(r0, &(0x7f0000000000)="596c45a09221ad2a0352e96028fe144eb646a152e3c542340de29b88f5a04771883c9bb7726837ff0ef2aa9a5fce0ca9cc044db56679c060202e01c1a7846416828ae5a9829cd989685ff0d569213c14d40ee049a080041152bd0358511a3ff96c9d27e8c4c9909a962649dfc9d9cfbae9c914cc33115f2961", 0x79) 22:09:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe4) r3 = openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x10001, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x2, 0x10000}, 0xc) r6 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6}) keyctl$get_persistent(0x16, r2, r6) 22:09:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2289, 0x0) 22:09:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xf000000}, [{}]}, 0x78) 22:09:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xe000000}, 0x0) 22:09:44 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) bind(r1, &(0x7f0000000080)=@qipcrtr={0x2a, 0xfffffffb, 0x3fff}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200), 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000024000b0f0000000000000095360b3f7a22b00800"/33, @ANYRES16=r3, @ANYBLOB="00000000ffffffff0000000009000100706c756700000000030002000000000000000000"], 0x3c}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={r6}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x800, 0x0, 0x7, 0x53, r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) getpid() ioctl$SG_IO(r7, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x1f000000}, 0x0) [ 367.864110][T20224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:44 executing program 1: r0 = timerfd_create(0x4, 0x80000) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000, 0x0) 22:09:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4c01, 0x0) 22:09:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x15000000}, [{}]}, 0x78) 22:09:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0481273, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 367.951368][T20228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x3f000000}, 0x0) 22:09:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) getrlimit(0x3, &(0x7f0000000040)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:44 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', r6}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r8, 0x2f, 0x4, 0x5, 0x3, 0xd, @local, @dev={0xfe, 0x80, [], 0x40}, 0x40, 0x8000, 0xffffffff, 0x969}}) getcwd(&(0x7f0000000000)=""/126, 0x7e) 22:09:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5382, 0x0) 22:09:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x16000000}, [{}]}, 0x78) 22:09:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x41010000}, 0x0) [ 368.245503][T20249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, 0x0) 22:09:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x17000000}, [{}]}, 0x78) 22:09:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) [ 368.300966][T20249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:44 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x60000000}, 0x0) 22:09:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5386, 0x0) 22:09:45 executing program 4: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x10000, 0x3214c1) 22:09:45 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) accept4(r1, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x800) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, 0x0) 22:09:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x18000000}, [{}]}, 0x78) 22:09:45 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x9effffff}, 0x0) 22:09:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)) 22:09:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x541b, 0x0) 22:09:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x19000000}, [{}]}, 0x78) 22:09:45 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xc00e0000}, 0x0) 22:09:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) set_robust_list(&(0x7f00000002c0)={&(0x7f0000000180)={&(0x7f0000000040)}, 0x40, &(0x7f0000000280)={&(0x7f0000000200)}}, 0xc) 22:09:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5421, 0x0) 22:09:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = memfd_create(&(0x7f0000000040)='dummy0\x00', 0x0) r3 = geteuid() r4 = geteuid() fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="040000000700000008000000", @ANYBLOB="1000020000"], 0x3c, 0x0) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, 0xfffffffffffffffd, 0x0) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r6, 0x0, r7) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000000)={0xa0, 0x0, 0x7, {{0x0, 0x3, 0x10, 0x5, 0x3, 0x1000, {0x1, 0x81, 0x3, 0x6, 0xfffffffffffffeff, 0x281, 0x8, 0x4, 0x80000001, 0x4, 0x2, r4, r7, 0x3, 0x8}}}}, 0xa0) 22:09:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1a000000}, [{}]}, 0x78) 22:09:45 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xd0410000}, 0x0) 22:09:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5450, 0x0) 22:09:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) dup(r1) 22:09:45 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xf0ffffff}, 0x0) 22:09:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1b000000}, [{}]}, 0x78) 22:09:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5451, 0x0) 22:09:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:45 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xffff0700}, 0x0) 22:09:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x1f000000}, [{}]}, 0x78) 22:09:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x200, 0x10880) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x20000000}, [{}]}, 0x78) 22:09:46 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xfffff000}, 0x0) 22:09:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, 0x0) 22:09:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x800, 0x0) 22:09:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x22090000}, [{}]}, 0x78) 22:09:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5460, 0x0) 22:09:46 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xffffff7f}, 0x0) 22:09:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0xfffff000) ioctl$FBIOBLANK(r1, 0x4611, 0x1) 22:09:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x6364, 0x0) 22:09:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x26000000}, [{}]}, 0x78) 22:09:46 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xffffff9e}, 0x0) 22:09:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x300, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x8912, 0x0) 22:09:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x27000000}, [{}]}, 0x78) 22:09:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x28102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0485510, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x20, &(0x7f0000000040)=[{}, {}]}) 22:09:46 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xfffffff0}, 0x0) 22:09:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x500, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:46 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0xffffffff}, 0x0) 22:09:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x30000000}, [{}]}, 0x78) 22:09:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x8933, 0x0) 22:09:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x2) 22:09:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x600, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x31000000}, [{}]}, 0x78) 22:09:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x89f0, 0x0) 22:09:47 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:09:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0xc0000) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3e000000}, [{}]}, 0x78) 22:09:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x700, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xae01, 0x0) 22:09:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3f000000}, [{}]}, 0x78) 22:09:47 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = openat$zero(0xffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x442, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x4, 0x4, [0x3, 0x1a35, 0x3, 0x3]}, &(0x7f0000000340)=0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000400)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000000000000000000000000f436ce000080", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100706c756700000000030002000000000000000000"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x10, 0x10, 0x7, 0x10000, {{0xa, 0x4, 0x3, 0x38, 0x28, 0x65, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x44, 0x11, "bd8383abd846f59bd2a4dc2ba3ed45"}]}}}}}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc55c292cb79a3e19}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004000) syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x8, 0x28000) r7 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x488300) ioctl$SG_IO(r7, 0x2286, 0x0) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000380)=0x10001) 22:09:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0xff00, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:47 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x2}, 0x0) 22:09:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xae41, 0x0) 22:09:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x7f000000}, [{}]}, 0x78) 22:09:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x1000000, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xae60, 0x0) 22:09:47 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x3}, 0x0) 22:09:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x220000) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x80ffffff}, [{}]}, 0x78) 22:09:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xae80, 0x0) 22:09:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x3000000, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x244080) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x9bffffff}, [{}]}, 0x78) 22:09:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x400454ca, 0x0) 22:09:47 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x4}, 0x0) 22:09:48 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x422, 0x82141) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$KDMKTONE(r1, 0x4b30, 0x7) 22:09:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x4000000, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xffffff80}, [{}]}, 0x78) 22:09:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40049409, 0x0) 22:09:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x5000000, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:48 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x8}, 0x0) 22:09:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x7, 0x2868c0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x7) 22:09:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xffffff9b}, [{}]}, 0x78) 22:09:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4008ae89, 0x0) 22:09:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x6000000, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 22:09:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x101100) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:48 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xe}, 0x0) 22:09:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x40186366, 0x0) 22:09:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x7000000, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x2}, [{}]}, 0x78) 22:09:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4020940d, 0x0) 22:09:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x5, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0xd1, 0x7f, 0x1000, "e4b258d38661a1c226418ceddf4a4e466643f5349e7ea00f3bf41601a53507a8629932c015d8b3b76f2bf44753e786bb23ca55c28474a1e8feb5a11c025e22e7b79b2963fb149cb9dd49411a08ba927c433ef409ef69fe1839b3ac99135d48e75596006b26fc666e31eabcbd511b2e87c30d4cf045e6a8dc0a1f3d42a6e03fd0fa0d1bdae1d6bf59f5dee30d31691977ad4b01f99e2aac2acea4f0857f81f5dee6619779e5ed1a87c46f27d1b7fbc85252c40c3da45edb018cce2aa64769b1f9c40b35827ea5d33371fa89f351182b8de5"}) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)=0x1) 22:09:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x8000000, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:48 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x60}, 0x0) 22:09:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x3}, [{}]}, 0x78) 22:09:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4020ae46, 0x0) 22:09:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0xfdfdffff, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x4, 0x6, 0xb0, 0x3, 0x3, 0x3, 0xebd, 0x2f9, 0x40, 0x28b, 0x6, 0x514, 0x38, 0x2, 0x1, 0x8, 0x7}, [{0x60000000, 0x5, 0x800, 0x90, 0x0, 0x8, 0x7, 0xf68}], "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", [[], [], [], [], [], [], [], []]}, 0x1878) 22:09:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x4}, [{}]}, 0x78) 22:09:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0xff000000, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:49 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xf0}, 0x0) 22:09:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x5}, [{}]}, 0x78) 22:09:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c5828, 0x0) 22:09:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = gettid() r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000000c0)=ANY=[@ANYBLOB="00003700210769fff6d1cb0f62e2ea48a44f35617c180c88c3c96234a01fb68b1ad6faf0f7e50aed2fb821df0a3ca213"]) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x90, 0x7, 0x0, 0x0, 0x9}) r4 = getpgrp(0x0) setpriority(0x0, r4, 0x10ffff) rt_tgsigqueueinfo(r2, r4, 0x29, &(0x7f0000000100)={0x37, 0x7, 0xb}) 22:09:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0xfffffdfd, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x7}, [{}]}, 0x78) 22:09:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c5829, 0x0) 22:09:49 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x141}, 0x0) 22:09:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x8}, [{}]}, 0x78) 22:09:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c582a, 0x0) 22:09:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:49 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x300}, 0x0) 22:09:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x9}, [{}]}, 0x78) 22:09:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c582b, 0x0) 22:09:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa0402, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x64) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000144}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000020) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xa}, [{}]}, 0x78) 22:09:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x402c5839, 0x0) 22:09:49 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xe00}, 0x0) 22:09:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xb}, [{}]}, 0x78) 22:09:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4400ae8f, 0x0) 22:09:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:50 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4040, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) openat$cachefiles(0xffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x181cc0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_IO(r0, 0x2286, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d1c, &(0x7f0000000000)=0x8000) 22:09:50 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xec0}, 0x0) 22:09:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x80086301, 0x0) 22:09:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xc}, [{}]}, 0x78) 22:09:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x80247008, 0x0) 22:09:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) read$dsp(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$SG_IO(r0, 0x2286, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200), 0x8) r4 = dup(r3) write$P9_RCREATE(r4, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0xc, 0x4, 0x4}, 0x22107e6a}}, 0x18) 22:09:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xd}, [{}]}, 0x78) 22:09:50 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x1f00}, 0x0) 22:09:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000440), 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x1, 0x7, 0x80, 0x4, {{0x21, 0x4, 0x3, 0x18, 0x84, 0x67, 0x0, 0xa3, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x10, 0x7, 0x0, 0xc, [0x6, 0xfffffffb, 0x4]}, @generic={0x88, 0x4, "55d5"}, @generic={0x83, 0xa, "f96b90f38e042332"}, @end, @lsrr={0x83, 0xb, 0xab, [@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x16}]}, @ssrr={0x89, 0x1b, 0x6f, [@private=0xa010101, @multicast1, @rand_addr=0x64010100, @private=0xa010100, @empty, @private=0xa010101]}, @rr={0x7, 0x1f, 0x9f, [@private=0xa010102, @broadcast, @empty, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x7, 0x2}]}, @noop]}}}}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, r2, 0x8000000) syz_io_uring_complete(r6) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) pidfd_send_signal(r1, 0x3b, &(0x7f0000000300)={0x1, 0x5, 0x2}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000280)={{0x11, @empty, 0x4e21, 0x0, 'sh\x00', 0x0, 0xe01d, 0x5f}, {@broadcast, 0x4e23, 0x2000, 0x9, 0xa12, 0x10f}}, 0x44) 22:09:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, 0x0) [ 374.069935][T20595] __nla_validate_parse: 1 callbacks suppressed [ 374.069947][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xe}, [{}]}, 0x78) 22:09:50 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f00000062c0)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001400)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000001280)=""/223, 0xdf}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000001380)=""/109, 0x6d}], 0x7, &(0x7f0000001440)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/202, 0xca}, {&(0x7f0000003540)=""/59, 0x3b}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x4, &(0x7f00000045c0)=""/126, 0x7e}, 0x39a}, {{&(0x7f0000004640)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005c40)=[{&(0x7f00000046c0)=""/99, 0x63}, {&(0x7f0000004740)=""/111, 0x6f}, {&(0x7f00000047c0)=""/195, 0xc3}, {&(0x7f00000048c0)=""/119, 0x77}, {&(0x7f0000004940)=""/62, 0x3e}, {&(0x7f0000004980)=""/141, 0x8d}, {&(0x7f0000004a40)=""/203, 0xcb}, {&(0x7f0000004b40)=""/101, 0x65}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/85, 0x55}], 0xa, &(0x7f0000005cc0)=""/147, 0x93}, 0xcf}, {{&(0x7f0000005d80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006240)=[{&(0x7f0000005e00)=""/151, 0x97}, {&(0x7f0000005ec0)=""/83, 0x53}, {&(0x7f0000005f40)}, {&(0x7f0000005f80)=""/13, 0xd}, {&(0x7f0000005fc0)=""/242, 0xf2}, {&(0x7f00000060c0)=""/55, 0x37}, {&(0x7f0000006100)=""/217, 0xd9}, {&(0x7f0000006200)=""/20, 0x14}], 0x8, &(0x7f0000006280)=""/10, 0xa}}], 0x4, 0x100, &(0x7f0000006340)={0x0, 0x3938700}) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, 0x0) [ 374.185907][T20603] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:50 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x3f00}, 0x0) 22:09:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000280)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0045878, 0x0) 22:09:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xf}, [{}]}, 0x78) 22:09:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0189436, 0x0) 22:09:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc020660b, 0x0) 22:09:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x26, 0x4, 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000200)={0x80}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) accept4$tipc(r4, &(0x7f0000000280)=@id, &(0x7f00000002c0)=0x10, 0x40800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$CHAR_RAW_SECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x15}, [{}]}, 0x78) [ 374.870184][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 374.978121][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40, 0x80000) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x500, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:51 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x4101}, 0x0) 22:09:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x16}, [{}]}, 0x78) 22:09:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0481273, 0x0) 22:09:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000280)=""/4096}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) openat$proc_capi20(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x20000, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80040) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x0, 0x3, "fd132e0f5bd303514d69339b8d50c10a9531f7af167c39f147bbb26f342b7566", 0x1f, 0xfffffffa, 0x2, 0x1, 0x90}) 22:09:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x600, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc08c5332, 0x0) 22:09:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x17}, [{}]}, 0x78) 22:09:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6f, 0x1f, @scatter={0x3, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f00000000c0)=""/113, 0x71}]}, &(0x7f0000000180)="96f02ced0bb6733a8632517d6d305267681cb9a4c399e37dbeeb197bc081da65902cd8b6401f4ca82738f686ccd738ebaa7a77db5ddecf3406dc1166a70f3b6733c397baba0905954178c240350c732935282e7f6f6a0ee5fe28b15862e623be7148482b7d82c5c853cf02e869d2e9", &(0x7f0000001280)=""/142, 0x9c, 0x10, 0x3, &(0x7f0000000200)}) 22:09:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2813, r2, 0xcba12000) ioctl$FIOCLEX(r0, 0x5451) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a000400000000000a00022000a4e91ee438242737d1d1", 0x39}], 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200)=0x1, 0x8) ftruncate(r3, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x9f, &(0x7f0000000280)=""/159}, &(0x7f0000001280), 0x0, 0x1, 0x4, 0x0, 0x0}) 22:09:51 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x41d0}, 0x0) 22:09:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x700, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x18}, [{}]}, 0x78) 22:09:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc08c5336, 0x0) 22:09:52 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2286, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c2f7d9b2a6cba6f46e0d08d00000024000b0f00", @ANYRES32=r1, @ANYBLOB="00000000ffc78f7b2b00000009000100706c756700000000030002000000000000000000"], 0x3c}}, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000)=0x40000) 22:09:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x49, &(0x7f0000000280)=""/73}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x200}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r5, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:09:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0xff00, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:52 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x6000}, 0x0) 22:09:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0xc0d05605, 0x0) 22:09:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x19}, [{}]}, 0x78) 22:09:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x1000000, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000180)={0xc, 0x8}, 0x10) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x309000) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1a}, [{}]}, 0x78) 22:09:52 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 22:09:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x2000000, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x103001) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f0000000000)) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c20000024000b0f000000000000000000000487cb8f1fba3299204bd2d7750905c8f8d913e285a5a683504a14ae4870f1de2b3b01fb561fbc5701120578b1f4688c6638f9d2c9e1f46933bde28d26ca404fbe1e839cf85923a2b1eab37ac07fd2c3466ef429362c51dd51", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100706c756700000000030002000000000000000000"], 0x3c}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0xc}}]}, 0x3c}}, 0x0) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x1, r3, 0x3c, r7}, 0x10) r8 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40, 0x0) recvmsg$can_raw(r8, &(0x7f0000000200)={&(0x7f0000000280)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/249, 0xf9}], 0x2}, 0x2003) 22:09:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x4, 0x7f, 0x3ff}}, 0x28) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1e) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x8000}, 0x16, 0x0) 22:09:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, @scatter={0x0, 0xc1}, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1b}, [{}]}, 0x78) 22:09:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x3000000, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={r7}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r7, 0x5f0}, 0x8) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000280)={0x6, @pix={0xd30d, 0xffff, 0x30314742, 0x9, 0x6, 0x1, 0x0, 0x1, 0x1, 0x4, 0x1, 0x6}}) 22:09:52 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xd041}, 0x0) 22:09:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x26}, [{}]}, 0x78) 22:09:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x404001) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r4 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x6) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:52 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 376.335896][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:53 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2000, 0x40101) 22:09:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x5000000, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x27}, [{}]}, 0x78) [ 376.468504][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:09:53 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x34000}, 0x0) 22:09:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x28a00) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000024000b0f000000000000000000000000fa1e9b99251dfb683ef65eedfaf24df665d701f6cf923fdd8d007cab", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100706c756700000000030002000000000000000000"], 0x3c}}, 0x0) read$alg(r4, &(0x7f0000000100)=""/214, 0xd6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000280)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000002c0)=0x28) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U+', 0x9}, 0x16, 0x2) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) rt_sigreturn() ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x6000000, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x30}, [{}]}, 0x78) [ 376.704899][T20766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40a00, 0x16c) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/95, 0x5f, 0x9, 0x0) 22:09:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = openat$dlm_plock(0xffffff9c, 0x0, 0x88600, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r4, 0x0, 0xffffffff, 0x0, {{}, {0xffffffff}, {0x14, 0x18, {0xe658, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x48000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r4, 0x0, 0x0, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0xf5a, 0x7, 0x2157}}}, ["", "", "", ""]}, 0x30}}, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xb9, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) 22:09:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x31}, [{}]}, 0x78) 22:09:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x7000000, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 376.818772][T20766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:53 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x7ffff}, 0x0) 22:09:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6d, 0x218100) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4004240b, &(0x7f0000000040)={0x7, 0x70, 0x3f, 0x8, 0x8, 0x3f, 0x0, 0x8000, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp, 0x40008, 0x10000, 0xe09d, 0x0, 0x2, 0x1, 0x7fff}) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x400) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x1) ioctl$SG_IO(r0, 0x1267, 0x0) r2 = openat$full(0xffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000180)={0x1, 0x0, 0x1, 0xc, {0xff, 0x5, 0x0, 0x3}}) 22:09:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x8000000, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x3e}, [{}]}, 0x78) 22:09:53 executing program 4: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xa8, 0x1, 0x2, 0x202, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 22:09:53 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x400300}, 0x0) 22:09:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={r6}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r6, 0x4}, &(0x7f0000000040)=0x8) 22:09:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0xfdfdffff, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x180}, [{}]}, 0x78) 22:09:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = shmget(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) write(r2, &(0x7f0000000000)="3a2359c3e7fdcb50055f20b098146c7eb70a9176b83a04b0fc60e37bdc14e1cdcd6511f121e65dd6163565fd6825a923d5261772c6cc1498b84b88723a0716d6f6f3b483229e4cfd3851ccc173ed98bfbb2a2273fa0bc4b2a9fc5b14401a05e072b620bc8bf0443377d0bf1ffc1d29b7b807e99f7c79db752652b9824faf42e3d6b8eb43d600fd3e5f309d0ad24b5f4b47705bca1fdaa1ff16d6fe8ddb8d623103c673357eefe817c684cad75d042a2f96b7ae4030460cbb3e1f2e3bc1f77164d277fdbf2cd5c97691", 0xc9) ioctl$SG_IO(r0, 0x1267, 0x0) [ 377.324107][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:53 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 22:09:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x300}, [{}]}, 0x78) 22:09:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0xff000000, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:54 executing program 5: ioctl$SG_IO(0xffffffffffffffff, 0x1267, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = getpgrp(0x0) setpriority(0x0, r2, 0x10ffff) process_vm_readv(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000180)=""/103, 0x67}, {&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000400)=""/130, 0x82}], 0x5, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/229, 0xe5}], 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xc000000) 22:09:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x500}, [{}]}, 0x78) 22:09:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0xfffffdfd, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:54 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 22:09:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x9, 0x3, 0x6}, &(0x7f00000002c0)=0x7, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="9141eb0e43868459ba35d668"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r3}, 0x74) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x10, &(0x7f0000000040)={&(0x7f0000000280)=""/4096, 0x1000, r3}}, 0x10) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 377.660283][T20829] IPVS: length: 135 != 24 [ 377.674171][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) fcntl$setsig(r1, 0xa, 0x24) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:54 executing program 4: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x2b, 0x80) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x5f, 0x0, @scatter={0x4, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/80, 0x50}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000380)=""/106, 0x6a}]}, &(0x7f0000000440)="1df83e01c6d1b473a6261a0484cbd412162defe0e32f962e09261f0d451f52dc76310b631d1fbedbee58b4017c688a902073d668fa243e2bcf315a0833da7f5fa6f82f697fe471677e954cc97382f2e31c0d33f105a1458e7f111aa8851a4f", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$BLKBSZSET(r1, 0x40041271, &(0x7f0000000040)=0x40) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000180)) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000280)="e181f327767338669e9e814b57e30c0f815a75ecafb19eb09f5d76f58d6e923eb9aad41744e432f2e6e3b13d37a85524a20ff7df2d7a109d5b6e39d521ee73ee5fee756d47527d2e0894f60174e9ce712cc2fc66eb9ea8069fa795", 0x5b) 22:09:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x700}, [{}]}, 0x78) 22:09:54 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 22:09:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x0, 0xaa, 0x81}}, 0xa) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000400)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000200), 0x8) r6 = getpgrp(0x0) setpriority(0x0, r6, 0x10ffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000480)={{0x8, 0x4, 0xe4c, 0x1e94, 'syz0\x00', 0x457d}, 0x6, 0x10000000, 0x800, r6, 0x1, 0x5a80, 'syz1\x00', &(0x7f0000000440)=['[\x00'], 0x2, [], [0x1000, 0x200, 0x8, 0x800]}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="000428bd70332cb5edd96e660c44b8a4b7dd7ed700040003007458d21a43710033d6a4fa2b400946e5fc8e64ab8b22200004000000000000d81c7b74c714ab22b4bf8f68aa3e93a491220454f1a458e2d3a6c8c34ca15defe29339e807cd2b1f189e14fb6b578fdb5dcbb4a9fcb83a3b90869c291b8d1aff9767ec77c43a000000000000", @ANYBLOB="efaa4aaf2c97e3a35e25"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xffffffffffffffff, 0x0, 0x0, @scatter={0x3, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/22, 0x16}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x900}, [{}]}, 0x78) 22:09:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:54 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x3000000}, 0x0) 22:09:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x922}, [{}]}, 0x78) 22:09:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x189) 22:09:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000000)={0xffff, 0x101, 0x40, 0xfffffffb}) 22:09:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xa00}, [{}]}, 0x78) 22:09:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:55 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:09:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x5) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xb00}, [{}]}, 0x78) 22:09:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffb, 0x1c1003) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x400000) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:09:55 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) 22:09:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xc00}, [{}]}, 0x78) 22:09:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:55 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x185) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f00000000c0)={0xf000000, 0xa2dc, 0x940e, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9c0902, 0xfffffff8, [], @p_u16=&(0x7f0000000040)=0x2}}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180)=0x6, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0x40, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x500200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) 22:09:55 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xe000000}, 0x0) 22:09:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)={0x30, r2, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000801) 22:09:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x1, 0x761040) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xd00}, [{}]}, 0x78) 22:09:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) 22:09:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:55 executing program 4: lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=@random={'btrfs.', '#\xcb\\}*&%\x00'}) r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x40000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) faccessat(r1, &(0x7f0000000440)='./file0\x00', 0x2b) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x16041, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010002d0b000000000000000039964121fbb4448c638e6a95637df30500"/43], 0x14}}, 0x0) r4 = socket(0x13, 0x6, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f00000001c0)={0x3}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x29, 0xfffffffffffffffc, 0x6d, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000300)=""/207, 0xcf}]}, &(0x7f0000000280)="9517f3b7238f7082dfd3f36cc48ddfb15798dc0ac78bc0f584a95499f2ebf88ac51e7805e5e7b71cc4784a9b96cbefa628c07d987935b7d49c5ec29b17bb5af9b04ce6e4bbfa21692ff812e85aead7f35b2099b41f8e3b157b88e9015372c5b375af6791be43878869624d8722", 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:55 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x1f000000}, 0x0) 22:09:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)={0x30, r3, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) read$hidraw(r6, &(0x7f0000000400)=""/251, 0xfb) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000070ad82d66b4940000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000009000100706c756700000000030002000000000000000000"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', r7, 0x29, 0x0, 0xb, 0x81, 0x5, @mcast1, @private2, 0x7800, 0x7, 0x3, 0x3}}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xbe, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb7, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffd, 0xffffffffffffffff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 22:09:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xe00}, [{}]}, 0x78) 22:09:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:55 executing program 5: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x3, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1, 0x801) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)={0x30, r3, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xec, r3, 0x3dc3d7fa30e69853, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x93, 0xac, "e02314e279da5c9dcf85f797052a73da26ed63c72c5c18345052d6168733b48f21c2a993aaed29edafd4a25605f4ee9a52512e1cc65d7896cbe2fd962922bc62bd9d458eab7f453433df472f0490345c0e6d5378aa198fe2d5fad4c495cb14196e6792fd59f2cca76853e2dc419c2e35da10801fc266d26d5b0bbecd1b88c70d4699f30bc0514c2b50156df5302099"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x22}]}, 0xec}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$SG_IO(r1, 0x1267, 0x0) 22:09:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2a0243) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 22:09:56 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 22:09:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0xf00}, [{}]}, 0x78) 22:09:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffd, 0x20a00) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000080), 0x4) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='sync\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2b5, 0x0, @scatter={0x1, 0xc1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000180)=0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) io_setup(0x8000, &(0x7f0000000200)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200)=0x44, 0x8) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000440)="6fe5a071610caec7639ef59d880faa84059bd028a336517c61034f67c756a385072633d20d74b24e0788a5f005acaa2b97c427252ba0381dff68dfb61841ed206eb89e233291a867bbd85b69ae8d01dbaafad6c2e6b0c2ee62ac6563054643f8d957cd59ae2a98fc991c75a330315ae6bd9b0c85fdde7dddf79e8e6c62e4eccda475fb54ac94a67644710eb0ec2f93", &(0x7f0000000500)=""/17, 0x4}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) io_cancel(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x4, r4, &(0x7f00000002c0)="cb5e1a1515c138c6728730741293d3723884061c9a3f9419b0dd0328452ec35e2c93c874ca45a8e3a500085b2a7687126de0af75998211b14b4e22642e738f97797f1f9c4b8fb1aefb97c8fc2990e3870846658824f9c7020885b87183eba2eb8c5f6754facf2789ffeab9923d9d9f65da821be55f392b8829dfef886d2bbe15bccd7890a1016dca2db9e3cfe4fafb", 0x8f, 0x62, 0x0, 0x0, r5}, &(0x7f0000000400)) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x4}) 22:09:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1500}, [{}]}, 0x78) [ 379.621076][T20971] __nla_validate_parse: 2 callbacks suppressed [ 379.621087][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) personality(0x400000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000001300)={0x100007, 0x4, 0x1, 0x3e, 0xe, 0x3}) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x490800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000200)=0x54) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x80000001) ioctl$SG_IO(r0, 0x1267, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x84}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$TCGETX(r5, 0x5432, &(0x7f0000001280)) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f00000012c0)=0x7fffffff, 0x4) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000, 0xfffffffb, 0x0) [ 379.762218][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:56 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x41010000}, 0x0) 22:09:56 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x2a, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x88, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000094) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000000)={0x101, "493e401b67c5191f7900c50d61b531c8467f7da78a4870ef20d3894a62e2f66f", 0x200, 0x7, 0x2, 0x1, 0x4}) r5 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r5, 0x2286, 0x0) 22:09:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1600}, [{}]}, 0x78) 22:09:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x92181) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1700}, [{}]}, 0x78) 22:09:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000280)={"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"}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) dup(r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x7ffd, 0x4f0}) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x2) 22:09:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:56 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) 22:09:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x101000) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1800}, [{}]}, 0x78) 22:09:56 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 22:09:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0185648, &(0x7f0000000700)={0x9c0000, 0x1f, 0x800, r1, 0x0, &(0x7f00000006c0)={0x9b0942, 0x8001, [], @p_u8=&(0x7f0000000680)=0x81}}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000)=0x1, 0x4) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1900}, [{}]}, 0x78) [ 380.485522][T21037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 380.546180][T21037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x2, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x90) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:57 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 22:09:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1a00}, [{}]}, 0x78) [ 380.712771][T21037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 380.779058][T21055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1b00}, [{}]}, 0x78) 22:09:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) [ 380.865173][T21058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:09:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x8f, 0x4, 0x93, "a259e960056a16e15fcb14a0b2303efe", "a9a0e2b6ff37ae79cbe0588b327404454eab0b41b5fb0f94badf459f97eaa968fc9d13b848fbc14b6d55a65267e8849823c4c1ea88e9ff1d00f216e2511af9b51613a12fe5d61961d089c346fcdfdea0fd5c460a18040a7e6c339d1e6860b07dc3e99fd6e5059359350ea1bc4c2e7d534ba8b5f241f6720e628b"}, 0x8f, 0x1) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:57 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xd0410000}, 0x0) 22:09:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000240), 0x2305e2b7) r4 = dup3(r3, r2, 0x0) fcntl$setstatus(r4, 0x4, 0x800) read$FUSE(r2, &(0x7f0000000240), 0x2305e2b7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7ffd}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) 22:09:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x2, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x1f00}, [{}]}, 0x78) 22:09:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x957, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x3, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x2000}, [{}]}, 0x78) 22:09:57 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 22:09:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/213, 0xd5}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f0000000400)=""/73, 0x49}], 0x6, &(0x7f00000004c0)=""/240, 0xf0}, 0x2) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000640)={@fixed={[], 0x12}}) prctl$PR_SVE_SET_VL(0x32, 0x157ea) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000600)=0x100) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x9) 22:09:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x2209}, [{}]}, 0x78) 22:09:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x4, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x2600}, [{}]}, 0x78) 22:09:58 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xffff0700}, 0x0) 22:09:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc051) 22:09:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x5, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x2700}, [{}]}, 0x78) 22:09:58 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 22:09:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x3000}, [{}]}, 0x78) 22:09:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x6, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:58 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 22:09:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={r5}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={r5, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xa2, @dev={0xfe, 0x80, [], 0x39}, 0x1}]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x9}, 0x8) 22:09:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x3100}, [{}]}, 0x78) 22:09:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x7, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:59 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 22:09:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x8, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x3e00}, [{}]}, 0x78) 22:09:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:59 executing program 1: openat$pidfd(0xffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x802, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x400, 0x70bd29, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0xb6f, 0x4) 22:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x3f00}, [{}]}, 0x78) 22:09:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x300, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 382.727884][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:59 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 22:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x7f00}, [{}]}, 0x78) 22:09:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x500, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:59 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 22:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x8}, [{}]}, 0x78) 22:09:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x600, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:09:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x9, 0x181201) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r2, 0xf8, 0xfd}, 0x0, &(0x7f0000000040)="e959a58a91561d2502db1ef4083728a3f37faf428a22d32896d331a5e474119bc3efcf5e18cf591f51ba60744422dc024672ca8ad6f8e11bb212a7b8fa6a817bd8b47e17ccdfe9ea31db6aa43aef72657bc872d3ec666e46ca1a5dccd1ef377907189d4caa965e8aa5e714e8f346e5baf508ba91bb1ca5b04a9715ef0089e9843a14a0b25efa09070c7c31677ef4d3a23ea97d5e81db90ffa13d924f71da86b109e673acb97322666c82beda4e0a1b6a016410ff33c07f8c8eafb9effea3307eb16a191f4063791fc62ae7226f355b2185a0c2c8775c8f6274c5506773ef03da7f7a540eb5871886317ef73e5bb55302e77b45bdc31a1d02", &(0x7f0000000140)=""/253) ioctl$SG_IO(r0, 0x2286, 0x0) 22:09:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x700, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x9}, [{}]}, 0x78) 22:09:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="00022bbd7000ffdbdf25030000000800020007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x380c0}, 0x0) 22:10:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:00 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 22:10:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0xff00, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:10:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0xa}, [{}]}, 0x78) 22:10:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:00 executing program 1: r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, 0x0) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) io_cancel(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000180)="8cbdc0195d25289392aa7448fee3c54de48dd4586ce90117fee86f874493bb613bd3391625f7e092fd6f305b65d765cf2c2a20d25c81a8323a9d8364047b39347c15eae0a4db28125a2b4af9b1951d8145ddf2c81472d343d22a73c55e", 0x5d, 0x1, 0x0, 0x1}, &(0x7f00000002c0)) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x20, &(0x7f00000000c0)=0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg2\x00'}) 22:10:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:10:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0xd}, [{}]}, 0x78) 22:10:00 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x2) 22:10:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 22:10:00 executing program 4: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x78}, [{}]}, 0x78) 22:10:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}) 22:10:00 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x3) 22:10:00 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x4) 22:10:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x9b}, [{}]}, 0x78) 22:10:00 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0x3) openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x8d) ioctl$SG_IO(r3, 0x2286, 0x0) 22:10:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}) 22:10:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) 22:10:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 22:10:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x768840) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r2) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '!.-'}, {0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, ':,'}, {}], 0xa, "014d78761511aaa56c3cc86ebcb294f23267b19fbb7535548dea0c3d28150c576e541e09f0cc54f12cc8081ca9881a66a9ba48322957c1ab0eac7a6ee1d0b696539235d1f1f5b71f13acd993568d4a9f2f4048f5c2adef787e80d5b37d4a103967fbd76195cd67ffd4ff4e23fa0eef9b1e53ad7b1dffdfa332b14e8d772675d305a81b3e6406ba575e722e2054a12f2bbab5e6759cb64e3643fd435430ea9d718740cba0a40898e5ce7738d9039b78a28d2078f147d9c3acff77c8dfadcc3122d8430f6cec4f652f2f9be42d21"}, 0xfe) 22:10:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={0x0}) r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000300)={r7, 0x1, r8}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000000)={r7, 0x10001, 0x6}) r9 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r9, 0x1267, 0x0) 22:10:01 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x8) 22:10:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}) 22:10:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xffff7fff, 0x141200) ioctl$SG_IO(r0, 0x2286, 0x0) 22:10:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}]}, 0x78) 22:10:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0xc2303) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{@none}, {@fixed}, {@none}]}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x1267, 0x0) 22:10:01 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0xe) 22:10:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}) 22:10:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x1, 0xda21b7f686ccf43b) 22:10:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x3}, [{}]}, 0x78) 22:10:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) 22:10:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x7fffffff, 0x400000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x2}, {0x0, 0x0, 0x0, 0x1}}], 0x10) ioctl$SG_IO(r0, 0x2286, 0x0) 22:10:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78) 22:10:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x10, 0x942) ioctl$SG_IO(r0, 0x1267, 0x0) 22:10:01 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x60) 22:10:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}) 22:10:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x5}, [{}]}, 0x78) 22:10:01 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x48, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0xfffffffffffffebc}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r3, 0x20, 0x70bd2a, 0x25dfdbfa, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x20058084}, 0x8000) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x1267, 0x0) 22:10:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffd, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) 22:10:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0}) 22:10:01 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0xf0) 22:10:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x7}, [{}]}, 0x78) 22:10:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x92, &(0x7f0000000000)=""/146}, &(0x7f00000000c0)="442e664ed3c5e873468fc7f8cc56d7c0", &(0x7f0000000100)=""/205, 0x0, 0x30, 0xffffffffffffffff, &(0x7f0000000200)}) ioctl$SG_IO(r0, 0x1267, 0x0) 22:10:02 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xffffffff, 0x0) 22:10:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0}) 22:10:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x8}, [{}]}, 0x78) 22:10:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:02 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:10:02 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x141) 22:10:02 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x301801) openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x620101, 0x0) r0 = openat$uinput(0xffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="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", 0xfd}, {&(0x7f0000000200)="4b4e8f4e44cb335e2c241ace154e057b1c03bc7ce2cf11a72e56430b8f7ba0227ce9a442a49b753564f41ec5b2e7d677a1f291465d6d5c6c6282b013c135591e3705c1e1a8f2070c9a8d4b705808c2f817521ca869ba8820ff20e8cb71780465d106ef4fdf4daf6db998f1eb98146934d68f3d4d02270480d2bf03d3536a1714d7cfecd6d959e170f3a828b5", 0x8c}, {&(0x7f00000002c0)="df0ea5198acd9ae25b574bc3e1c0e5d7dd381b51ba83cca72e084784fc7e8ed9d5290a2f91dfba6bb220fe60d5b4975d00d90d8736a7b9e65fef82cba6305e442937a818d9b949594c532630d97bada3f4b4b4ade21aecde46d31c8b66f3d14d665e3991c17a1656a5b7772acba7e762c821", 0x72}, {&(0x7f0000000340)="54dd006ed67cdd3a93cbef958fcaede255d9c21a94255d1693b5eb968c2460a26daa068b069608fc13f1363f3eeec9d0892bb96913b405fd7c9cf06faa4e75ee62144b85c2dfd2ff901deaa163ebe45076c666dcdda5c7f5df9b06fdb623fb977459183e300b5b3984c8cc5cd72a4a477583bdbdc8fc2675d7402defec8fbedabdc3f93e8be9ed4aa0f2cb3cd851f75b0606d59b3a127f4851417a260efdf38cb9090ef26e0bfffa7298867734f03985254f3258262f86db83312c3973d144472f51db265b996080d9c424ff9048818feecd482267efc688d9ab49", 0xdb}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="c3ae06d05735128be3c881301a2c3d81576e61d7d6fe", 0x16}, {&(0x7f0000001480)="3fc6575287f949c519ce3eb56d96c77c06d4260267ddbf201b6e3f61515654fd1655a5e80174b76cce8fddc62839d0ee7aa4671cbdd9e359fe25cad2e702383fa9bdde9094a0d0cd9bf0ed3eb3fbb03c2807fc10aef15c94548c8036f2ae358b65f5223fe9fdfa47680496b6c7b6cb7fca9ca52c1fccb8e49ef68cd79b9ee45a9874bbfaec0829c955e609456d67e436d2dea0e4f875308e860a670af729c188b4d780c6619bd72f3ee0d2ef6cc89e1a372cff2aa840a142f735b83f9eb3b2ece5768cc019facad4a96dacbf2748dea847ee79b3c8", 0xd5}], 0x7, 0x7) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_IO(r1, 0x1267, 0x0) 22:10:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}) 22:10:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x9}, [{}]}, 0x78) 22:10:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x101040) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000040)="b053c0604e16a4", 0x7, 0x43, &(0x7f0000000080)={0x77359400}) 22:10:02 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x300) 22:10:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x20020, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:10:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0xa}, [{}]}, 0x78) 22:10:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0}) 22:10:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4004ae52, &(0x7f0000000000)=0x7) 22:10:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000000)={0x0, 0x0, @ioapic}) 22:10:02 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0xe00) 22:10:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0}) 22:10:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0xb}, [{}]}, 0x78) 22:10:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0xc}, [{}]}, 0x78) 22:10:03 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r3 = openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80040, 0x100, 0x9}, 0x18) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000080)=0x200) 22:10:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x10000) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$SG_IO(r0, 0x1267, 0x0) 22:10:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0}) 22:10:03 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0xec0) 22:10:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000010000400200000007000000070000000101000000000000010000000300000004000000040000ffffff800100000003000000500000000700000000000000040000001d9e00001f000000feffffff0800000000000000"]) 22:10:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0xd}, [{}]}, 0x78) 22:10:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={r5, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) 22:10:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0}) 22:10:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x6d4041) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000821) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200), 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r4], &(0x7f0000000140)=0xd7) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f00000002c0)={0x2}) ioctl$SG_IO(r0, 0x1267, 0x0) 22:10:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 22:10:03 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x1f00) 22:10:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0}) 22:10:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0xe}, [{}]}, 0x78) [ 386.889452][T21465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:10:03 executing program 5: openat$fuse(0xffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$SG_IO(r0, 0x1267, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) 22:10:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 22:10:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0x3}}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x40}}, 0x4) r4 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) inotify_init1(0x80800) 22:10:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0xf}, [{}]}, 0x78) 22:10:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0}) 22:10:03 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x3f00) 22:10:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffc, 0x400) ioctl$SG_IO(r0, 0x1267, 0x0) 22:10:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) [ 387.233753][T21489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:10:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0}) 22:10:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x15}, [{}]}, 0x78) 22:10:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x80000000, 0x8000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0x21, 0x0, 0x2015, 0x5, 0x3, 0x9, 0xffff7fff}) ioctl$SG_IO(r0, 0x1267, 0x0) 22:10:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[]) 22:10:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x408000) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) fsetxattr(r1, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000040)='/dev/sg#\x00', 0x9, 0x1) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 22:10:04 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x4101) 22:10:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0}) 22:10:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x16}, [{}]}, 0x78) 22:10:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[]) 22:10:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x2, 0x170) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:10:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffe, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) 22:10:04 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x41d0) 22:10:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x17}, [{}]}, 0x78) 22:10:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0}) 22:10:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[]) 22:10:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x589a41) ioctl$SG_IO(r0, 0x1267, 0x0) 22:10:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000000)={r0, 0x5, 0x6, 0xc6}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SG_IO(r4, 0x2286, 0x0) 22:10:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x18}, [{}]}, 0x78) 22:10:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 22:10:04 executing program 3: r0 = socket$inet(0x10, 0x80803, 0x4000000000000004) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700008c0e05000000000000683540150024001d001fc42e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x6000) 22:10:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x1267, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc010643a, &(0x7f00000000c0)={0x4000000, 0x9, 0x3}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x3f, 0xc73, 0x1, 'queue0\x00', 0x4}) 22:10:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x9a0000, 0x7, 0x0, r2, 0x0, &(0x7f0000000080)={0x9b0940, 0xb3a, [], @value64}}) ioctl$SG_IO(r0, 0x2286, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x0, 0x7fff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001080)='fou\x00') sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, r6, 0x29, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="10002bbd700001f3df250200000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x4004840}, 0x20000000) ioctl$CHAR_RAW_GETSIZE(r4, 0x1260, &(0x7f0000000000)) 22:10:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB]) 22:10:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0xc1, 0x0}, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0}) [ 388.139357][T21566] [drm:drm_calc_timestamping_constants] *ERROR* crtc 33: Can't calculate constants, dotclock = 0! [ 388.151883][ C0] ------------[ cut here ]------------ [ 388.157659][ C0] WARNING: CPU: 0 PID: 21566 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x31e/0x3b0 [ 388.168860][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 388.176478][ C0] CPU: 0 PID: 21566 Comm: syz-executor.5 Not tainted 5.8.0-rc6-syzkaller #0 [ 388.185478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.195888][ C0] Call Trace: [ 388.199196][ C0] [ 388.202074][ C0] dump_stack+0x18f/0x20d [ 388.206567][ C0] panic+0x2e3/0x75c [ 388.210489][ C0] ? __warn_printk+0xf3/0xf3 [ 388.215255][ C0] ? printk+0xba/0xed [ 388.219439][ C0] ? log_store.cold+0x16/0x16 [ 388.224149][ C0] ? __warn.cold+0x5/0x45 [ 388.228637][ C0] ? __warn+0xd6/0x1f2 [ 388.232731][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 22:10:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x31, 0x30, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x19}, [{}]}, 0x78) 22:10:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200), 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x7, 0x8) [ 388.238133][ C0] __warn.cold+0x20/0x45 [ 388.242409][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 388.247805][ C0] report_bug+0x1bd/0x210 [ 388.252293][ C0] handle_bug+0x38/0x90 [ 388.256479][ C0] ? find_held_lock+0x2d/0x110 [ 388.261268][ C0] exc_invalid_op+0x13/0x40 [ 388.265801][ C0] asm_exc_invalid_op+0x12/0x20 [ 388.270764][ C0] RIP: 0010:vkms_vblank_simulate+0x31e/0x3b0 [ 388.276767][ C0] Code: 85 9e 00 00 00 48 8b 95 48 02 00 00 4c 89 e1 bf 02 00 00 00 48 c7 c6 00 60 b3 88 e8 4c 2c ad ff e9 e5 fe ff ff e8 32 d9 11 fd <0f> 0b e9 88 fd ff ff e8 d6 3d 51 fd e9 11 fe ff ff 4c 89 ef e8 c9 [ 388.297513][ C0] RSP: 0018:ffffc90000007da8 EFLAGS: 00010046 [ 388.303607][ C0] RAX: 0000000000010001 RBX: ffff888218689888 RCX: ffffffff8461e123 [ 388.311598][ C0] RDX: ffff8880518f2100 RSI: ffffffff8461e39e RDI: 0000000000000007 [ 388.319680][ C0] RBP: 0000000000045551 R08: 0000000000000001 R09: ffff8880518f29c8 [ 388.327760][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888218688d38 [ 388.335895][ C0] R13: 0000000000000000 R14: ffff888218689888 R15: dffffc0000000000 [ 388.344144][ C0] ? vkms_vblank_simulate+0xa3/0x3b0 [ 388.349547][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 388.355047][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 388.355066][ C0] __hrtimer_run_queues+0x6a9/0xfc0 [ 388.355149][ C0] ? vkms_disable_vblank+0x20/0x20 [ 388.355172][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 388.355187][ C0] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 388.355206][ C0] hrtimer_interrupt+0x32a/0x930 22:10:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x80000000, 0x7fff}) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000040)={0x0, 0x200, 0x300000, &(0x7f0000000000)=0x942}) [ 388.355231][ C0] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 388.355244][ C0] asm_call_on_stack+0xf/0x20 [ 388.355250][ C0] [ 388.355262][ C0] sysvec_apic_timer_interrupt+0xe0/0x120 [ 388.355275][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 388.355289][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x8c/0xe0 [ 388.355300][ C0] Code: 48 c7 c0 88 e0 b4 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 37 48 83 3d e3 52 cc 01 00 74 22 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 35 e5 66 f9 65 8b 05 fe 70 19 78 [ 388.355307][ C0] RSP: 0018:ffffc90008677b70 EFLAGS: 00000282 [ 388.355317][ C0] RAX: 1ffffffff1369c11 RBX: 0000000000000282 RCX: 0000000000000000 [ 388.355324][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000282 [ 388.355331][ C0] RBP: ffff888218688390 R08: 0000000000000000 R09: 0000000000000000 [ 388.355337][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 388.355344][ C0] R13: 0000000000000282 R14: ffff888218688390 R15: ffff8880a35e5150 [ 388.355369][ C0] drm_vblank_get+0x147/0x1d0 [ 388.355385][ C0] drm_wait_vblank_ioctl+0x3bd/0x1980 [ 388.355408][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 388.355423][ C0] ? lock_downgrade+0x820/0x820 [ 388.355434][ C0] ? find_held_lock+0x2d/0x110 [ 388.355448][ C0] ? __might_fault+0x11f/0x1d0 [ 388.355469][ C0] drm_ioctl_kernel+0x220/0x2e0 [ 388.355481][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 388.355498][ C0] ? drm_setversion+0x8a0/0x8a0 [ 388.536469][ C0] ? __might_fault+0x190/0x1d0 [ 388.536491][ C0] compat_drm_wait_vblank+0xcd/0x180 [ 388.536506][ C0] ? compat_drm_mode_addfb2+0x190/0x190 [ 388.536532][ C0] ? compat_drm_mode_addfb2+0x190/0x190 [ 388.536545][ C0] drm_compat_ioctl+0x1e6/0x300 [ 388.536558][ C0] ? compat_drm_setunique+0x10/0x10 [ 388.536574][ C0] __do_compat_sys_ioctl+0x1d3/0x230 [ 388.536592][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 388.536605][ C0] do_fast_syscall_32+0x7f/0x120 [ 388.536620][ C0] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 388.536631][ C0] RIP: 0023:0xf7fe1569 [ 388.536643][ C0] Code: 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 388.536649][ C0] RSP: 002b:00000000f5ddc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 388.536665][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c010643a [ 388.536671][ C0] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.536678][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.536685][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 388.536691][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.538715][ C0] Kernel Offset: disabled [ 388.675496][ C0] Rebooting in 86400 seconds..