[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.515248][ T26] audit: type=1800 audit(1552951952.951:25): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 41.537279][ T26] audit: type=1800 audit(1552951952.961:26): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 41.566798][ T26] audit: type=1800 audit(1552951952.961:27): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.218' (ECDSA) to the list of known hosts. 2019/03/18 23:32:41 fuzzer started 2019/03/18 23:32:44 dialing manager at 10.128.0.26:41303 2019/03/18 23:32:44 syscalls: 1 2019/03/18 23:32:44 code coverage: enabled 2019/03/18 23:32:44 comparison tracing: enabled 2019/03/18 23:32:44 extra coverage: extra coverage is not supported by the kernel 2019/03/18 23:32:44 setuid sandbox: enabled 2019/03/18 23:32:44 namespace sandbox: enabled 2019/03/18 23:32:44 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/18 23:32:44 fault injection: enabled 2019/03/18 23:32:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/18 23:32:44 net packet injection: enabled 2019/03/18 23:32:44 net device setup: enabled 23:35:28 executing program 0: syzkaller login: [ 217.217851][ T8103] IPVS: ftp: loaded support on port[0] = 21 23:35:28 executing program 1: [ 217.330736][ T8103] chnl_net:caif_netlink_parms(): no params data found [ 217.438448][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.446442][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.469066][ T8103] device bridge_slave_0 entered promiscuous mode [ 217.478686][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.485955][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.504201][ T8103] device bridge_slave_1 entered promiscuous mode [ 217.521605][ T8106] IPVS: ftp: loaded support on port[0] = 21 [ 217.553205][ T8103] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.564412][ T8103] bond0: Enslaving bond_slave_1 as an active interface with an up link 23:35:29 executing program 2: [ 217.611960][ T8103] team0: Port device team_slave_0 added [ 217.619793][ T8103] team0: Port device team_slave_1 added [ 217.689693][ T8103] device hsr_slave_0 entered promiscuous mode [ 217.747251][ T8103] device hsr_slave_1 entered promiscuous mode [ 217.820731][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.828123][ T8103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.836115][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.843406][ T8103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.855284][ T8108] IPVS: ftp: loaded support on port[0] = 21 23:35:29 executing program 3: [ 218.032006][ T8106] chnl_net:caif_netlink_parms(): no params data found [ 218.158754][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.166510][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.178063][ T8106] device bridge_slave_0 entered promiscuous mode [ 218.186381][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.193621][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.202117][ T8106] device bridge_slave_1 entered promiscuous mode [ 218.228081][ T8112] IPVS: ftp: loaded support on port[0] = 21 [ 218.244306][ T8108] chnl_net:caif_netlink_parms(): no params data found [ 218.265467][ T8103] 8021q: adding VLAN 0 to HW filter on device bond0 23:35:29 executing program 4: [ 218.275777][ T8106] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.321574][ T8106] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.342407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.389974][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.431266][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.443112][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 218.493930][ T8103] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.515541][ T8106] team0: Port device team_slave_0 added [ 218.525214][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.536998][ T8108] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.545183][ T8108] device bridge_slave_0 entered promiscuous mode [ 218.563315][ T8117] IPVS: ftp: loaded support on port[0] = 21 [ 218.575948][ T8106] team0: Port device team_slave_1 added [ 218.584056][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 23:35:30 executing program 5: [ 218.597138][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.605780][ T8115] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.613045][ T8115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.624519][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.633519][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.646982][ T8115] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.654126][ T8115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.662248][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.672402][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.681807][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.689640][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.698870][ T8108] device bridge_slave_1 entered promiscuous mode [ 218.751196][ T8108] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.799423][ T8106] device hsr_slave_0 entered promiscuous mode [ 218.847195][ T8106] device hsr_slave_1 entered promiscuous mode [ 218.889738][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.899130][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.908041][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.916818][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.926007][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.935486][ T8108] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.958446][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.967130][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.985997][ T8120] IPVS: ftp: loaded support on port[0] = 21 [ 219.017009][ T8108] team0: Port device team_slave_0 added [ 219.043483][ T8108] team0: Port device team_slave_1 added [ 219.066727][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.078978][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.089286][ T8103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.209142][ T8108] device hsr_slave_0 entered promiscuous mode [ 219.257214][ T8108] device hsr_slave_1 entered promiscuous mode [ 219.371969][ T8103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.393954][ T8112] chnl_net:caif_netlink_parms(): no params data found [ 219.411443][ T8117] chnl_net:caif_netlink_parms(): no params data found 23:35:31 executing program 0: r0 = socket$inet(0x2b, 0xf, 0x45c0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a667f2ffffffffffffff7ba4c93854191af0fe57917c7c2a533590023d24e3817bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818ab7900"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x400027f, 0x0, &(0x7f0000003180)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000840), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) syslog(0x0, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x2b, @multicast2, 0x4e20, 0x0, 'dh\x00'}, {@local, 0x0, 0x10004, 0x4, 0x0, 0x7}}, 0x44) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)="1b", 0x1, 0x8000, 0x0, 0x0) close(r1) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10) r2 = msgget(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000001, 0x0, 0x0) msgsnd(r2, &(0x7f0000000040)={0x2}, 0x4, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x100, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0x12, 0x2, 0x2, 0x1, 0x7, 0x2, "753c7546587ac77929139959d065fc5bd427"}, 0x12a) [ 219.611299][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.626946][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.639877][ T8112] device bridge_slave_0 entered promiscuous mode [ 219.688926][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.696074][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.705433][ T8117] device bridge_slave_0 entered promiscuous mode [ 219.720846][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.729062][ C0] hrtimer: interrupt took 34902 ns [ 219.747390][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.765806][ T8129] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 219.773558][ T8112] device bridge_slave_1 entered promiscuous mode [ 219.790704][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 219.809281][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.830726][ T8108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.847226][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.854390][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.879004][ T8131] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 219.892961][ T8117] device bridge_slave_1 entered promiscuous mode [ 219.944124][ T8108] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.962790][ T8106] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.992700][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.008792][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.026808][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.034679][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 23:35:31 executing program 0: [ 220.069122][ T8112] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.125078][ T8117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.141610][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.155025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 23:35:31 executing program 0: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x20000000000024) [ 220.172745][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.179991][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.200356][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.219913][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.247073][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.254331][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.277037][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.286208][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.311351][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.318808][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.327094][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.335884][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.344962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.353568][ T5] bridge0: port 2(bridge_slave_1) entered blocking state 23:35:31 executing program 0: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x20000000000024) [ 220.360704][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.369252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.378163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.387222][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.395261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.444001][ T8112] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.468373][ T8117] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.492301][ T8117] team0: Port device team_slave_0 added [ 220.498867][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.507913][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.516480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.525391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.533952][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.542284][ T8146] ptrace attach of ""[8145] was attempted by "/root/syz-executor.0"[8146] [ 220.552629][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.579238][ T8112] team0: Port device team_slave_0 added [ 220.587935][ T8117] team0: Port device team_slave_1 added 23:35:32 executing program 0: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x20000000000024) [ 220.598303][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.607940][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.619392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.633593][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.648453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.657180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.665408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.682656][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.690390][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.698734][ T8120] device bridge_slave_0 entered promiscuous mode [ 220.707941][ T8112] team0: Port device team_slave_1 added [ 220.732502][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.741570][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 23:35:32 executing program 0: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x20000000000024) [ 220.754889][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.763863][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.785659][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.797905][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.808374][ T8108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.825746][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.833218][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.842815][ T8120] device bridge_slave_1 entered promiscuous mode [ 220.852030][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:35:32 executing program 0: syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000740)='bcsf0\x00') setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000240)=0x3e73, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000b00)='bcsf0\x00\x00\x00\x00\x00\x00h\x11\x00') socket$inet(0x2, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) write$binfmt_script(r0, 0x0, 0x0) [ 220.899141][ T8117] device hsr_slave_0 entered promiscuous mode [ 220.937126][ T8117] device hsr_slave_1 entered promiscuous mode [ 221.069872][ T8112] device hsr_slave_0 entered promiscuous mode [ 221.117394][ T8112] device hsr_slave_1 entered promiscuous mode [ 221.160739][ T8120] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.267522][ T8108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.303489][ T8120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.425143][ T8120] team0: Port device team_slave_0 added [ 221.527644][ T8106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.571004][ T8120] team0: Port device team_slave_1 added [ 221.660370][ T8117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.756143][ T8117] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.795566][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 23:35:33 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x20200000004161, 0x0) 23:35:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x20000000000000d) syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) [ 221.817669][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.969837][ T8120] device hsr_slave_0 entered promiscuous mode [ 221.987128][ T8120] device hsr_slave_1 entered promiscuous mode [ 222.037165][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.046039][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.087967][ T2846] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.095124][ T2846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.104981][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.113756][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.122484][ T2846] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.129722][ T2846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.143422][ T8112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.158260][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.166218][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.190928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.201038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.210231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.219818][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.228922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.238802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.254893][ T8117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.268365][ T8117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.284462][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.293421][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.304005][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.312576][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.321295][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.338528][ T8112] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.351625][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.359497][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.368141][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.377727][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.388013][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.395254][ T8113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.403160][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.426246][ T8117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.451745][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.461159][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.470323][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.477479][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.485348][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.507696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.519733][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.537878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.564599][ T8112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.577582][ T8112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.593406][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.604626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.616423][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.629775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.639405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.648149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.656819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.665132][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.674679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.692720][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.701063][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.709686][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.728366][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.738096][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.746576][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.754545][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.767290][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.775451][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.784377][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.793794][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.801993][ T8113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.815692][ T8112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.829292][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.848228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.859799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.868897][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.879251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.900413][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.913013][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.923908][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.932902][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.947617][ T8120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.962677][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:35:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x6002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 23:35:34 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000003ff8)) [ 222.988393][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.008195][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.070648][ T8216] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 223.071437][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 23:35:34 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) setrlimit(0xd, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 23:35:34 executing program 2: getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) pipe(0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0xfefe) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) sendfile(r0, r1, &(0x7f0000000100), 0x20000000009) 23:35:34 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x20200000004161, 0x0) 23:35:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000000040)="a1", 0x1) 23:35:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd25}}], 0x0, 0x0, 0x0}) 23:35:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\xb0`\x04\xf6\xaa\xc6\xef\xf4\xe1a\xe9t\x93\xe3\xccH\xd8.&\a\xc0\xa6\a+\n\x13\xe3\xea\xe2;\xc1\xc0\n\x03A\xe8~\v\xa5\x02Y\x1dN\x1f\xf7\xe9\xba\xe0\x10}v\x91\xc2\xa2\x1c\xa12d\x00\xd8\xb8 \xf4D\xae^\v\x81\x86Yy =\x93[\x1dHl\x8b3\xc7\x13jJ\xc4\x84\xe7\x9c\xaa!|\xd8_@\xec0xffffffffffffffff}) syz_open_dev$dmmidi(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 23:35:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x1ff, 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) 23:35:35 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) syncfs(0xffffffffffffffff) 23:35:35 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000140)={0x77359400}, 0x0) 23:35:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x6002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 23:35:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:35:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x6002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 23:35:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000200), 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:35:35 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") close(r0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 23:35:36 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x2, @random="a7f70cbb437d", 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 23:35:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x0}, 0x20) gettid() r0 = memfd_create(&(0x7f0000000240)='proc}GPLeth0^wlan0#:\x00', 0x0) msgget$private(0x0, 0x3c8) msgctl$IPC_INFO(0x0, 0x3, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil) socket$netlink(0x10, 0x3, 0xe) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) execveat(r0, 0x0, 0x0, 0x0, 0x400001000) tkill(r1, 0x1) 23:35:36 executing program 4: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1048, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x20000000000024) 23:35:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x2, 0x0, 0x1}, 0x2c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000200)=""/64) membarrier(0x40, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) bpf$MAP_CREATE(0x4, &(0x7f0000000080)={0x3, 0x0, 0x73fffe, 0x0, 0x20820000, r1, 0x0, [0x20000000000000]}, 0x2c) 23:35:36 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x6002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 23:35:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0xf93, 0x2, 0x0, 0x1}, 0x2c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\f', 0xffffffffffffffff, 0x4c00000000006874}, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000200)=""/64) membarrier(0x40, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240)="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", 0xbf4, r0}, 0x68) bpf$MAP_CREATE(0x4, &(0x7f0000000080)={0x3, 0x0, 0x73fffe, 0x0, 0x20820000, r1, 0x0, [0x20000000000000]}, 0x2c) 23:35:36 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:36 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000240)='\x00\x00\xda\x89\x038f\x19\xfa\x0e]\x85', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r1, 0x0) r2 = socket$inet6(0xa, 0x200000000000001, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @multicast1}}) getdents64(r0, &(0x7f00000000c0)=""/47, 0x2f) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000180)=0x40) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000040), 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000100)={0x8f, 0x10, 0x0, {0x0, 0x0, 0x32735f59, 0x3, 0x10000, 0x0, 0x6, 0x1}}) 23:35:36 executing program 5: 23:35:36 executing program 4: 23:35:36 executing program 1: 23:35:36 executing program 3: 23:35:36 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:36 executing program 5: 23:35:36 executing program 4: 23:35:37 executing program 1: 23:35:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x6002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 23:35:37 executing program 5: 23:35:37 executing program 3: 23:35:37 executing program 1: 23:35:37 executing program 4: 23:35:37 executing program 5: 23:35:37 executing program 3: 23:35:37 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:37 executing program 1: 23:35:37 executing program 4: 23:35:37 executing program 5: 23:35:37 executing program 3: 23:35:37 executing program 2: 23:35:37 executing program 1: 23:35:37 executing program 5: 23:35:37 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:37 executing program 3: 23:35:37 executing program 4: 23:35:37 executing program 4: 23:35:37 executing program 1: 23:35:37 executing program 5: 23:35:37 executing program 3: 23:35:37 executing program 2: 23:35:37 executing program 5: 23:35:37 executing program 4: 23:35:37 executing program 1: 23:35:37 executing program 3: 23:35:37 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:38 executing program 5: 23:35:38 executing program 2: 23:35:38 executing program 4: 23:35:38 executing program 1: 23:35:38 executing program 3: 23:35:38 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0xa000000, 0x0, 0x0, 0x0, 0xfd}}, 0xffffffffffffffc1}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r1 = msgget(0x1, 0x140) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000080)=""/233) 23:35:38 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x3f, 0x7bd, 0x4}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$sock_proto_private(r0, 0x89e1, 0x0) 23:35:38 executing program 5: r0 = accept(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x8, 0x80) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000200)={0xf000, 0x6000, 0x60, 0xffffffffffba7ad6, 0x1}) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L-', 0x2}, 0x28, 0x2) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000280)={0x2000, 0x1, 0x6, 0x4, 0x3f}) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000240)={0x9ad, 0x22, 0x1, r2}) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x6c2}, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000002c0)=0x5, &(0x7f0000000340)=0x4) ioctl$KDDISABIO(r2, 0x4b37) 23:35:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0xff00000000000000, 0x0, 0x66}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 23:35:38 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000100)={0x10001, "393944c371bea2827e3402b4eacccee27ad557bef05d86eabd7deb260d195b1a", 0x1, 0x1}) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1e) r2 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r2) socket$pptp(0x18, 0x1, 0x2) 23:35:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x400000004, 0x3) r1 = accept4$packet(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0x80000001}, 0x8) r3 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, [], &(0x7f0000000100)=0x8000}) 23:35:38 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000180), 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = msgget(0x0, 0x200) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r5 = getegid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000440)={{0x100000001, r4, r5, r6, r7, 0xa, 0x7}, 0x10000, 0x3, 0xffffffff80000000, 0x1, 0x3, 0x8, r2, r2}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r8, 0x7, r1, &(0x7f0000000080)={r0, r0, 0xa0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x4, 0x30, 0x8, 0x4}, &(0x7f0000000100)=0x18) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000004c0)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x9, 0x2, 0x9, 0x2, 0x4, 0xffffffffffffffff, 0xffffffff, r9}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000005c0)={0x14, 0x88, 0xfa00, {r10, 0x1c, 0x0, @ib={0x1b, 0x2, 0x40, {"0da48932ad25b6f773f378b261cba487"}, 0x7, 0x200, 0x21}}}, 0x90) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000500)) prctl$PR_SET_ENDIAN(0x14, 0x1) 23:35:38 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x19, 0x400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000080)="6d674c9f575f3b75aa1f3754a47ecafdde1b59c1c8df5d1d8ba83af2a11546a2ecc322abb8d497e142de831d7bd118873222de9218f5070628088f196a2b63e37b02e8930e1ece9b168bbc8a0410266489142c3e7ca217f37546fb3aae5b6a890db2bfef37e4f8a0194198b5ebc335a01033d0ccbe51", &(0x7f0000000100)=""/224}, 0x18) write$cgroup_pid(r0, 0x0, 0xffc0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xa60) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="230000002e000104bfa9d345e7eb8d99c1ffffff0e00000043bc59198183fe204ee2d7", 0x23}], 0x1}, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000240)={0x7, 0x9}) 23:35:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x8001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x3) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x4, 0x100) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x8, 0x6000) 23:35:38 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x101801, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'lo\x00'}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x8000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x3f, 0xc60, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x5}, 0x20) add_key$user(0x0, &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 23:35:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001400008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x400000) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x0, 0x4, 0x2}, 0x2}}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@nat={'XatY\x00\x00\x00\x00\x00\x03\xe0\x01\x00', 0x19, 0x3, 0x3e0, [0x20001600, 0x0, 0x0, 0x200018d8, 0x20001908], 0x0, &(0x7f0000000240), &(0x7f0000001600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x1b, 0x0, 0x86dd, 'sit0\x00', 'erspan0\x00', 'b\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x128, 0x198, 0x1d0, [@statistic={'statistic\x00', 0x18}, @ip6={'ip6\x00', 0x50, {{@local, @dev}}}]}, [@snat={'snat\x00', 0x48, {{@dev}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}]}, @arpreply={'arpreply\x00', 0x10}}, {{{0x3, 0x0, 0x0, 'vcan0\x00', 'nr0\x00', 'veth1_to_bridge\x00', 'ip6gretap0\x00', @remote, [], @remote, [], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @broadcast, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x458) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) 23:35:38 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:38 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xcc26, 0x5, 0x8}, &(0x7f0000000080)=0x10) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x1, 0x5, [], &(0x7f00000000c0)=0xa305}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) [ 227.427189][ T8491] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 72 23:35:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x12) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f00000001c0)={0x80000001}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r4}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) 23:35:38 executing program 1: r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2a0000, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x828c, 0x0, 0x2, 0x3}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x750000}, 0x200000}) 23:35:39 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:39 executing program 2: syz_open_dev$mice(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffffffff, 0x30200) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = getpgid(0x0) wait4(r2, 0x0, 0x2, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 23:35:39 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200, 0x104) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x49, &(0x7f0000000000)={@mcast2}, 0x20) [ 227.577723][ T8497] ISOFS: Unable to identify CD-ROM format. 23:35:39 executing program 3: getpeername(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xc) connect$inet(r2, &(0x7f0000000040)={0x2, 0xfffffffffffffffc, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x810005, 0x0) 23:35:39 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x12) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f00000001c0)={0x80000001}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r4}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) 23:35:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="24216759ae8b054e265df5cf1cdd8b5508b7672afbf433bd35c3cbdedce3f802609da800040000fc45ab2cd55c44dfe4970cda661d3f85dd3853d9f914db064c9dfed4c8dc7a6e167f989cd460265fbe6e71dcbdc70a4863e579165bf68e44fed121d2296f04791bba8de35a93c8b97e691d5ed115b695e7aae657", 0x7b) r1 = accept$alg(r0, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a31b3764701795788238c54e343"], 0x10) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) 23:35:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x83f, &(0x7f0000000540)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r3 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x4, 0x42001) io_submit(r1, 0x4, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000040)="a38b3a92213b3f", 0x7, 0xc03, 0x0, 0x0, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000140)="3df72527b6b4830b77e34afdfccc1d80aa44356fb5065b8688a25034c72c23464df0e2d471e17a15f73c97052f9ab46ca3659922ae044c9393626670e67422573d8d1c13332f48a4362371f0be8a7406b1669f16fd53337a209783738c3c0bfd78483833d2e14872685e48ba609061dd0ce6c60870d0e3a278f19e7ab075098c286c5dfd4da5f71b0537b879d71bdf6dd3eb2422fdac70516b1cc27012e3a3833fadbfefc368f27074ce088224cb2cebfaee61ca725f932e0c0267b2988dcde161bdb8badb8b57f90216d1da3f357b74b115", 0xd2, 0x8000, 0x0, 0x1, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000002c0)="a42ba4551d8e3fbb396dbdfeb20e833aaa79d4a14b83d8a615528e02ae21209ab6be059e27fe4561fadf22ca162e3d1175", 0x31, 0x800, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000340)="799c446f32d6e331ce5d40dc9048002bc99d4c338693aca91a1d2a0de2ca2b6a84e5b9b3699e324e5b04ed5646e728ce584a8e985a2b87e66859b5c86119e6", 0x3f, 0x6, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x98, 0xd543, {"ad48f3634a6b51019970d392acd96408d7b5d790dc2eb4ba539ab7e32ae2ba36c7c4fe4f5bf297900e68a5566dbbf1ffe232b3557bcbc146e3fbcae4b0864fae14609c1bb41218033bf69a7e682f3c8eea16a5c445bb4f142b5778d4e91ad3f36d73a33dc33bb531db6f9ff482307bda368b56e78bf933b62b3247d2c42938"}}, {0x0, "632280032b71dd19ec7301"}}, &(0x7f00000006c0)=""/4096, 0xa5, 0x1000, 0x1}, 0x20) r5 = dup(r4) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000480)={0x3, 0x8, [0x1, 0x6]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000400)={{0x100, 0x9}, 0x20000000000, 0x1000, 0x9, {0x6, 0x4e}, 0x4, 0x200}) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) r6 = socket$inet(0x2, 0xa, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000500)={0x0, 0x1000}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000005c0)=r7, 0x4) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4) r8 = dup3(r4, r6, 0x0) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x1, 0x1, {0xa, 0x4e21, 0x0, @local, 0x8}}}, 0x32) [ 227.946310][ T8533] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 23:35:39 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x12) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f00000001c0)={0x80000001}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r4}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) 23:35:39 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000000c0)={0x4, 0x3, 0xffffffffffffff80, 0x563, 'syz1\x00', 0x100}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000ec5c2f9e2d081f59fd40c01be6bd8e050000000000000000000051b8761ea30000000043099ac8d7"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000180)) 23:35:39 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x12) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f00000001c0)={0x80000001}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r4}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) 23:35:40 executing program 2: syz_open_dev$mice(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffffffff, 0x30200) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = getpgid(0x0) wait4(r2, 0x0, 0x2, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 23:35:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001000000000000002560b700ff"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000200)={0x0, 0x0, 0x3ed, {}, [], "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", "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"}) creat(&(0x7f0000000040)='./file0\x00', 0x20) 23:35:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x2) r1 = dup3(r0, r0, 0x80000) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000100)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x2, 0x0, 0x2}], 0x314) 23:35:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x12) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f00000001c0)={0x80000001}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r4}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:40 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7c}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000280)={0x0, 0xffffffff, 0xbc, &(0x7f0000000240)=0x100000001}) 23:35:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x12) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000001c0)={0x80000001}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:40 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000001c0)) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, 0xe0, "e55df8937f374236b8e96551b6637b8c7a637d145c67964a6cc8afa2b06cac71630ab45f0b5642d9805fef4817636d9e7114e0b63abae49d514a5a422cd3bcd0775ae1b78cf81446ffb353eb2a67e9d2c1ac822085aa23eec554ebf0284a1afcecba53492a68fbdb3f30be45e6e9fe6c8d4d272956a8cca499f2fdc3e0f6716e1ef295b4b43037ddaa242904677d4d8ffbe7e4ad1f9cca45e1e33b3a34ff4917a56d79284fce5d1001306f41b81ef468ffbe26c3086fbabf58a9ea60599b54ce329fb6f108f552dc959709f1d860546a33300f2b753ae069da15d62f015a8e47"}, 0xe6) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) 23:35:40 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x7, 0x5, 0x8, 0x3, 0x3e, 0x10000000, 0x3d, 0x40, 0x2fc, 0x0, 0x7, 0x38, 0x2, 0xf305, 0x6, 0x80}, [{0x6, 0x6, 0x83, 0x2, 0x0, 0x5e3, 0x9, 0xfffffffffffffffd}], "3059f082b5f69934aff34f59a855864e1bdd81a1bee33390f43f56ed29a20c042b592d2f451c87f2ac3746e860920162b411cc4542629731cc8093fd2270f02e85b86e4bf04414f7a43ded6f6a096f45a2a9d9eb15a3f708c28b38a8d7ffd7a589aeaba00b528bfff90b0e6e424c6b0b83b686", [[], [], [], [], [], [], [], []]}, 0x8eb) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000002400)={0x0, 0xfb, 0x15, 0x0, 0x0, "a045c182bc7a1792b0334720dd94a871"}, 0x15, 0x2) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xc920, 0x4200) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000b80)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x14}, 0x401}, {0xa, 0x4e20, 0xffffffffffff8000, @dev={0xfe, 0x80, [], 0x1d}, 0x1}, r2, 0xa9e}}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000c00)=ANY=[], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 23:35:40 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x12) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000001c0)={0x80000001}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:40 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) mq_open(&(0x7f0000000040)='/dev/video#\x00', 0x840, 0x0, &(0x7f0000000080)={0x1, 0x3ff, 0x5, 0x83d9, 0x34, 0x2, 0x6, 0x8}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x3f, 0x2}) 23:35:41 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x200400, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000380)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1000000210007f9, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r3, r2, &(0x7f0000000280), 0x6) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000580)={0x1, &(0x7f0000000500)=[{0x4, 0x81}]}) getitimer(0x2, &(0x7f00000000c0)) fdatasync(r2) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x8000, 0x400, &(0x7f0000000200)=0x9}) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000300)) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000140)=0xffff) close(r2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0x6}], 0x2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000180)={0x1, r2}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000240)={0x3, 0xff, 0x5}) 23:35:41 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @broadcast, [], {@canfd={0xd, {{0x0, 0x1, 0xfff, 0x100}, 0x3f, 0x2, 0x0, 0x0, "f946a70a2a82f017c5aab065460b71221430b9d13e62a21a624b2831aed5c71e294a73451ab1396d836388f3b38c912e732658170b95a8c8d747ad143066318b"}}}}, 0x0) 23:35:41 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x30000000000012) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x8, 0x6}) 23:35:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x12) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000001c0)={0x80000001}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:41 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x403, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@can, {&(0x7f00000000c0)=""/211, 0xd3}, &(0x7f0000000200), 0x8}, 0xa0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) fcntl$setlease(r0, 0x400, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000580)={0x0, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)={0x0, 0xc96c}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x54}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)={r2, 0x80000000003, 0x4a}, 0x8) 23:35:41 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x80, 0x9e1, 0x0, 0xff}, 0x6) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/psched\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x2578, 0xbb5, 0x100, 0x1, 0x400}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r4, 0x4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast1}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x12, 0x0, 0x0) 23:35:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r4}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:41 executing program 4: r0 = socket$inet6(0xa, 0x80000, 0x7f) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000a00)=0xe2f39c990836d009) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x0, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x0, 0x1, 0xa8}]}, &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0xfb, &(0x7f0000000000)=""/251}, 0x48) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000840)=0x6000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000980)={0x0, 0x1f}, &(0x7f00000008c0)=0x8) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000009c0)=0x8000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000900)={r4, 0x9}, &(0x7f0000000940)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@ipv4, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) fstat(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x121f, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000200)="ea63d1517413eb0fb77a63ca66d01007a9609bfd8838204192ebf268363c8f5bfc4312e7d922da8cec7aaa0356251dcd2d69fff9f4e099b52b01f9ad348e9eef974f", 0x42, 0x6}, {&(0x7f0000000300)="635d3cc3f90f475b89868131fcc7c2caae12a0a5e928f1e0a7ef3da4ecca7ef12a80bd68aa68403da2df29e7ce0459c54aaf64a75039a81ee40fbdf3677692968ac779c0d6c81cbdef01c3805bb42591133eea", 0x53, 0x5}, {&(0x7f0000000180)="e66f3be08ff42ba25f1c271e2c", 0xd, 0x23}, {&(0x7f0000000380)="26d2df0bbce52ebfe5c3294e1b44216dfa1524b867dcc56518f30682fbd25fee27230aa44eb6966ffdd237", 0x2b, 0x100000001}], 0x1010000, &(0x7f00000007c0)=ANY=[@ANYBLOB='jqfmt=vfsold,noinline_dentry,inline_data,uid=', @ANYRESDEC=r5, @ANYBLOB=',id>\x00', @ANYRESDEC=r6, @ANYBLOB=',\x00']) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000880)=[@window={0x3, 0x3, 0x1ff}, @mss={0x2, 0x3}, @window={0x3, 0x8001, 0x841b}, @window={0x3, 0x80000000, 0x4}, @sack_perm, @timestamp, @timestamp], 0x7) 23:35:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x2, 0x6}) ioctl$KVM_SET_LAPIC(r2, 0xc080aebe, &(0x7f0000000a40)={"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"}) 23:35:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r4}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:41 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x110bfe, 0x0) syz_emit_ethernet(0xffb6, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffff08ffffffffffff08004500fec300000000002f9078ac14ffbbe00000010689880bca889078"], 0x0) [ 229.936933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 229.943060][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 229.960111][ T8669] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 229.997284][ T8669] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 230.023273][ T8669] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 230.031916][ T8669] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 230.124257][ T8685] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 230.133162][ T8685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 230.156058][ T8685] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 230.164953][ T8685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 23:35:42 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x200400, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000380)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1000000210007f9, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r3, r2, &(0x7f0000000280), 0x6) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000580)={0x1, &(0x7f0000000500)=[{0x4, 0x81}]}) getitimer(0x2, &(0x7f00000000c0)) fdatasync(r2) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x8000, 0x400, &(0x7f0000000200)=0x9}) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000300)) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000140)=0xffff) close(r2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0x6}], 0x2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000180)={0x1, r2}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000240)={0x3, 0xff, 0x5}) 23:35:42 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00'}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x800000004e22, 0x0, @loopback}, 0x1c) listen(r1, 0xfffffffffffffffd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) write(r3, &(0x7f0000000440)="f3", 0x1) close(r2) close(r1) 23:35:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = dup2(r0, r0) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x5, {0x6}}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x10c, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 23:35:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0xffffffffffffff2a) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0xeffdffff, 0x0, &(0x7f0000002a80), 0x159, &(0x7f0000000100)=[@op={0x18}], 0x24}], 0x4924924924924b1, 0xff03) 23:35:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00'}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x4, 0x12) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 23:35:42 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60f1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz1\x00', {0x1c27, 0x1, 0x9, 0x2}, 0x10, [0x5, 0x2116, 0x1f, 0x8, 0x7, 0x400, 0x8, 0xfff, 0x200, 0x8001, 0x6, 0x1000, 0xffffffff, 0x3, 0x0, 0x1, 0xffffffff, 0x1000, 0x6e, 0x660, 0x1, 0xffffffff, 0x248, 0xfffffffffffffffe, 0x8d6d, 0x0, 0xa000000, 0x7, 0x8001, 0xcd9, 0x189f, 0xa1, 0x7f, 0xff, 0x4, 0x3f, 0x200, 0x8000, 0xffffffff, 0x1, 0x100000000, 0x4, 0x100000000, 0x81, 0x2, 0x7, 0xa091, 0x0, 0x2, 0x0, 0x8aa, 0x3, 0x3, 0x1, 0x4, 0x5, 0x2, 0x7ff, 0x66, 0x3, 0x10000, 0x8, 0xea4, 0x700000000000000], [0x40, 0x0, 0xb03, 0x8, 0x1ff, 0xc000000000000000, 0x1, 0x1, 0x2, 0x72f, 0x2, 0x792a292f, 0xfffffc0000000000, 0x81, 0x81, 0x8001, 0x9, 0x0, 0x1, 0x1c000000000, 0x2, 0x94, 0x10001, 0x9, 0x80, 0x1f, 0x65c2, 0x6ff, 0x1b, 0x7f, 0x2, 0xfffffffffffffffe, 0xffffffff, 0x9, 0xccf, 0x3, 0x3f, 0x7, 0x27f, 0xd5, 0x1, 0x4, 0xfffffffffffffff9, 0xffffffffffffe027, 0x7db, 0x6, 0x1ff, 0x6, 0x2, 0x6, 0x401, 0x7603, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x2, 0x5, 0xfffffffffffffffe, 0x89c, 0x3, 0xffffffff, 0x400, 0x1ff], [0x5, 0x7fffffff, 0x9, 0x9, 0xffffffff, 0x4466346c, 0x81, 0x1, 0x101, 0x3, 0x6d2, 0x7, 0x400, 0xb712, 0x80000000, 0x7, 0x8, 0x1, 0xfff, 0x5, 0x5, 0x8, 0x4, 0x7, 0x57a9, 0xffff, 0x4, 0x6, 0x4, 0x3, 0x79d11d3d, 0x101, 0x1, 0x29, 0x100000000, 0x1, 0x7, 0xffffffff, 0xf11, 0x223, 0x8, 0x7f, 0x200000004000000, 0x6, 0x6, 0x5, 0x20, 0x3, 0x3ff, 0xee, 0x1, 0x681, 0x9, 0x8, 0x5, 0x2, 0x2, 0x0, 0x8, 0x1, 0x1, 0x2, 0xd8, 0x3], [0x101, 0x4, 0x1000, 0x3, 0x2, 0x10001, 0x9, 0x0, 0x7, 0x0, 0x4, 0x100000001, 0x7, 0xe11, 0x81, 0x1, 0x80000000, 0x0, 0x80000001, 0xffff, 0x2, 0xfffffffffffffffe, 0x7, 0x3f, 0x2, 0x7, 0x8, 0x4, 0x6, 0x1e88, 0x101, 0xfff, 0x7, 0x4, 0x0, 0xfffffffffffffffd, 0x2, 0x2, 0x3, 0x5, 0x100000000, 0x9, 0x8, 0x7, 0x2, 0x1, 0x7, 0x0, 0x20e7266b, 0x4, 0x100000001, 0x7, 0x6, 0x9, 0x1, 0xf1, 0x80, 0x2, 0x0, 0x4c5, 0x6, 0x0, 0x8, 0x5]}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x44000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0xfffffffffffffffe) 23:35:42 executing program 1: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x0, r1) setpriority(0x0, r1, 0x10000) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100), 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) userfaultfd(0x80800) readlink(0x0, &(0x7f0000000040)=""/16, 0x10) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24, 0xffff}]}, 0x14, 0x1) fchmod(r0, 0x0) getresuid(&(0x7f0000000700), 0x0, 0x0) getuid() getresgid(0x0, &(0x7f0000003dc0), &(0x7f0000003e00)) fstat(r0, &(0x7f0000003e40)) fstat(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003f40)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000004040)=0xe8) getgroups(0x3, &(0x7f0000004080)=[0xee01, 0xee00, 0xee01]) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000040c0)={{{@in6=@dev, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f00000041c0)=0xe8) lstat(&(0x7f0000004200)='./file0\x00', &(0x7f0000004240)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000004440)=0xc) sendmsg$netlink(r2, &(0x7f00000045c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x10}], 0x1, 0x0, 0x0, 0x10}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) clone(0x4002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r3) syz_open_dev$loop(0x0, 0x0, 0x0) 23:35:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x350}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00'}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:42 executing program 0: syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:42 executing program 2: syz_emit_ethernet(0xffb6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffe0ffff0100ffffffffffff08004503fec3000000c93e65b4a795c45bbbe000000100140000ca8890785c565f9e26e134f47a097b01afbac042f4802fa42896a18655a1d1a1401cc033c685649fad2c"], 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@rose={'rose', 0x0}, 0x10) 23:35:42 executing program 3: creat(0x0, 0x3) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0xfffffffffffffffc) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x519) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 23:35:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200100, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x82, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000002c0)=0x6035b82a) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xa2b7) 23:35:42 executing program 0: syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:42 executing program 4: r0 = socket$kcm(0x11, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000640)="c143050000004000e9011fe4ac14140ceb", 0x11}], 0x1}, 0x0) 23:35:42 executing program 1: socket$inet6(0xa, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x24, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696d1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d1000"}, 0x3b) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x24800, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0x47, 0x4) [ 231.291483][ T8758] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 23:35:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) [ 231.364406][ T8758] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 23:35:42 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x22, 0x1) 23:35:42 executing program 0: syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003680)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') write$FUSE_GETXATTR(r1, &(0x7f0000000180)={0x18, 0x0, 0x4, {0x20000000000}}, 0x18) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0xb00, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0xfdef) 23:35:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000140), 0x4) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@hci, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r1}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000180)=0x4) socketpair(0x4, 0x1, 0x9, &(0x7f0000000000)) 23:35:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x404102, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000001480)=""/4096) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x5) mq_timedsend(r2, &(0x7f0000000240)="dbe0b6e691f3eb97c20f5d5e5f90f194ccd3a6e99999c41c1b5c8c469ef486e83c3c9ccdcd815bee81306d05cef5c2658f92d61f0345e03968216aa8e3eb290f01a78250af6595d64684405b39763aa17f0979532e24130e0c9ff4bbfbe57380c667ce4e5871710aa61394c1dee484ac91a64b50ab3422c0f9eb75566994d9964ff44c99cae15d2e81b00d42a59c0d897fd5a337c414a37217df031c9164203d224e39b54d56a010aea5c9cc505167610e877c0c86c724ea06a254483fc3ad", 0xbf, 0x7ff, &(0x7f0000000140)={0x77359400}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x1, 0x2}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000001300)={0x0, 0x0, {0x3, 0xdf, 0x7, 0x4}}) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000340), 0x87}]) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x82000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xf0d06d91ef9e8b7) 23:35:43 executing program 0: syz_open_dev$dmmidi(0x0, 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) 23:35:43 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180)) setrlimit(0x7, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x1fd, 0x7, 0x0, 0x0, 0x2000000000000}, 0xffffff30) 23:35:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) [ 231.805976][ T8812] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:35:43 executing program 0: syz_open_dev$dmmidi(0x0, 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0100a2400000003f12eb48") fgetxattr(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="42b3372e7000000000000000003db6a3d57a1fc72a30af20aba5e6d2246c1206496afcd836827a2a6adef36393b828656b13cb69187b15c6b9d07550850a88afd4becd2140eccc0764fbe2a23aada2ef8c7c634bb42379ec18d7276f33f67f58836341e5dc00eb956413be3deceed887d3e406485e6834c0d547405f280957656d031d6c64c2c3ce9c89eaa32c894d0338ab5bc8d7ab987e1ef5ea2f65eba7a2225e"], &(0x7f0000000380)=""/198, 0xc6) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'ipddp0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x41, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/157, 0x9d) sendto$inet6(r1, &(0x7f0000000300)="030400000300600000000000fff55b4202938207d9fb3780398d537500000600791f301ee61675ddc51938d33d203b0053c0e385471c9715672da7222a2bb70100af5ba514d40000ef00000054000000a96fa9a1e8d1803e770aec6e9ef5837dbd0000ce08467a2c4436f157", 0x6c, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20040, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) write$P9_RCREATE(r3, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x0, 0x4}, 0x3}}, 0x18) 23:35:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffe8a, 0xfffffffffffffff5}, 0x1b92084380888581) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000200)=0xe3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x0, 0x0, 0x10001}) socket$packet(0x11, 0x0, 0x300) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000280)={0x3, 0xffffffffffffffc1, 0x1e30, 0x2, 0x1}) lgetxattr(0x0, &(0x7f0000000380)=@known='trusted.syz\x00', &(0x7f0000000680)=""/241, 0xf1) open$dir(0x0, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cgroup:.posix_acl_access\xb3\x00') ioctl$KDGKBSENT(r4, 0x4b48, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000240)={0xffffffffffff029c, 0x25, 0x6, 0xa58b, 0x4, 0x7, 0x5, 0x8, 0x4, 0xfffffffffffffffd, 0x2}, 0xb) 23:35:43 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x1) flock(r0, 0x2) exit_group(0x0) flock(r1, 0x2) 23:35:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') syz_init_net_socket$ax25(0x3, 0x2, 0xcf) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x0) 23:35:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x404) 23:35:43 executing program 0: syz_open_dev$dmmidi(0x0, 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:43 executing program 1: socketpair$unix(0x1, 0x400000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x0, 0x400, 0xffffffffffffffad}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x400000000000001, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 23:35:43 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x0, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x1010000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r6 = getuid() mount$9p_virtio(&(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x8, &(0x7f0000000380)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x6}}, {@access_client='access=client'}, {@posixacl='posixacl'}], [{@uid_eq={'uid', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, r5}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}, {@pcr={'pcr', 0x3d, 0x10}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@audit='audit'}, {@dont_appraise='dont_appraise'}]}}) 23:35:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x1, [0x0]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000100), 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f4f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab62, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:35:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) [ 232.441612][ T8871] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 23:35:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:44 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x0, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffe8a, 0xfffffffffffffff5}, 0x1b92084380888581) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000200)=0xe3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x0, 0x0, 0x10001}) socket$packet(0x11, 0x0, 0x300) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000280)={0x3, 0xffffffffffffffc1, 0x1e30, 0x2, 0x1}) lgetxattr(0x0, &(0x7f0000000380)=@known='trusted.syz\x00', &(0x7f0000000680)=""/241, 0xf1) open$dir(0x0, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cgroup:.posix_acl_access\xb3\x00') ioctl$KDGKBSENT(r4, 0x4b48, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000240)={0xffffffffffff029c, 0x25, 0x6, 0xa58b, 0x4, 0x7, 0x5, 0x8, 0x4, 0xfffffffffffffffd, 0x2}, 0xb) 23:35:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x500) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) read(r0, &(0x7f0000000180)=""/11, 0xfffffffffffffd31) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 23:35:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:44 executing program 2: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x20000054) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000140)=0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x545, @mcast1, 0xee}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0xc8e, @rand_addr="ab8250665b3645caa4a8d8dddc64ab1b", 0xfffffffffffffffe}, @in6={0xa, 0x4e21, 0x400, @local, 0xff}], 0x64) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r0, 0x6, 0x14, &(0x7f0000000040), 0x346) 23:35:44 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x0, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:44 executing program 1: r0 = socket(0x80000000000000a, 0x10000000002, 0x0) unshare(0x30200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4, @ipv4={[0xfeffffff], [], @loopback}, 0x80000000}, 0xcb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000100), 0x4) 23:35:44 executing program 3: ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)=0x13e) bind$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @netrom}, [@null, @default, @bcast, @remote, @bcast, @rose, @rose, @default]}, 0x48) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x0, 0x4, 0x7ff}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x80000001}, &(0x7f0000000240)=0x8) exit_group(0x81) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0xffff}, 0x0, &(0x7f0000000100)={0x77359400}, 0x8) close(r2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)) syz_open_pts(0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80000) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000500)=[{r3}], 0x20000000000000f9, 0x0, 0x0, 0x190) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000140)={0x5}) 23:35:44 executing program 3: ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)=0x13e) bind$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @netrom}, [@null, @default, @bcast, @remote, @bcast, @rose, @rose, @default]}, 0x48) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x0, 0x4, 0x7ff}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x80000001}, &(0x7f0000000240)=0x8) exit_group(0x81) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0xffff}, 0x0, &(0x7f0000000100)={0x77359400}, 0x8) close(r2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)) syz_open_pts(0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80000) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000500)=[{r3}], 0x20000000000000f9, 0x0, 0x0, 0x190) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000140)={0x5}) 23:35:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xff7f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r2, 0x3}) 23:35:44 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:44 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, 0x0, 0x0, 0x0) 23:35:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$llc(r1, &(0x7f00000000c0)={0x1e, 0x302}, 0x10) dup2(r3, r2) 23:35:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:44 executing program 1: socket$inet(0x2, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={@mcast1}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x101, 0xb81, 0x5}) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) creat(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000"], 0x1}}, 0x0) 23:35:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:44 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:44 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f0000000040)=r4, 0xffffffffffffff25) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) 23:35:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:45 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000280)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::b:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) timer_create(0x0, &(0x7f0000000140)={0x0, 0x30, 0x0, @thr={&(0x7f00000002c0)="ce6da987aa766b4c3219394a91be8a5d086fb1415c5ebb7cf5091f70bbfb2e31dfdb478b31ef999a29757f6869317aab9ddb25603ca1d7a7c0a4a76bf4842717e4ea2d21b89b08cf33cbfe50ac9d5d40ba9ba02a70a074da67b6ce81362b07d7b1486b03f64f5ff8e14b45312f8463b9ed826a2f9a5966112dcecfb6d6383defbc1850b532ed15d0a5f03dcb5ded4995a54d3a0004e587db90453fd7ed5c5e137962ea55a86107c8170135e1eae6dd19e7429dc4401759ce7cbbd05c343af40c5c861584aa4e537eaa815f2696248bd6b6e50f7332b754040caf251e861d24ed4d5e2949af3c48b6a295beb380f3", &(0x7f00000000c0)="d2344d311c581b526533042db13a66fa82b12eb1658cbda981b42d7a6a4f03d9f7a64bd599f37d517fa6dfb40a53c2a45b080fd719c4dcb3cf"}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000400)={{r2, r3+10000000}, {0x0, 0x989680}}, &(0x7f0000000440)) wait4(0x0, 0x0, 0x0, 0x0) 23:35:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/153, 0x99) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000400), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)=0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x1ff, 0x4) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000280)=0x3, 0x4) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) getpid() open(0x0, 0x400840, 0x2) recvmmsg(r0, &(0x7f0000007fc0)=[{{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/217, 0xd9}], 0x1, &(0x7f0000000600)=""/202, 0xca}, 0x9}, {{&(0x7f0000000540)=@ipx, 0x80, &(0x7f0000001980)=[{&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/70, 0x46}, {&(0x7f0000000900)=""/20, 0x14}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/12, 0xc}], 0x5, &(0x7f0000001a00)=""/41, 0x29}, 0x4}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001a40)=""/197, 0xc5}, {&(0x7f0000001b40)=""/238, 0xee}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)=""/162, 0xa2}, {&(0x7f0000001d40)=""/143, 0x8f}], 0x5, &(0x7f0000001e80)=""/47, 0x2f}, 0x9}, {{&(0x7f0000001ec0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001f40)}, 0xef6}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001f80)=""/190, 0xbe}, {&(0x7f0000002040)=""/23, 0x17}, {&(0x7f0000002080)=""/35, 0x23}, {&(0x7f00000020c0)=""/241, 0xf1}, {&(0x7f00000021c0)=""/27, 0x1b}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000002200)=""/114, 0x72}, {&(0x7f0000003340)=""/221, 0xdd}], 0x8, &(0x7f0000003440)=""/239, 0xef}, 0x7}, {{&(0x7f0000003540), 0x80, &(0x7f0000003740)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/249, 0xf9}, {&(0x7f00000036c0)=""/114, 0x72}], 0x3}, 0x80000001}, {{&(0x7f0000003780)=@alg, 0x80, &(0x7f0000007c40)=[{&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000003800)=""/112, 0x70}, {&(0x7f0000003880)=""/161, 0xa1}, {&(0x7f0000003940)=""/70, 0x46}, {&(0x7f00000039c0)=""/86, 0x56}, {&(0x7f0000003a40)=""/29, 0x1d}, {&(0x7f0000006ac0)=""/143, 0x8f}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/175, 0xaf}], 0x9, &(0x7f0000007d00)=""/156, 0x9c}, 0xa40}, {{&(0x7f0000007dc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000007f00)=[{&(0x7f0000007e40)=""/167, 0xa7}, {&(0x7f0000003a80)=""/5, 0x5}], 0x2, &(0x7f0000007f40)=""/77, 0x4d}, 0x800}], 0x8, 0x2001, 0x0) sendmsg$netlink(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@int=0x8001, 0x4) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0x100000000000cf50, 0x4) 23:35:45 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:45 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='user.)'], 0x0, 0x0, 0x0) flistxattr(r0, 0x0, 0x0) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x2, 0x2, 0x3, 0xfff}, 0x6) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000080)) 23:35:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x8, 0x2, 0x80, 0x3, &(0x7f0000000300)=[{}, {}]}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff00, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001800230100000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0], 0x24}}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x50480, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000040)={0x0, 0x0, 0x301d, 0x7fffffff, 0x8001, {0xb193, 0x324}}) sendmsg$xdp(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="a27dd4683e2bc1d6508edbc936c485c0378413fc58208708a50912c7959f02c05c4e86745db1e9b490b1cf4bcd4f98e940ddbf8cb8bc5c2e0b2a3f4bb5e742d7048a9960", 0x44}, {&(0x7f0000000100)="b80fca19736048673b4acdfe9b18e6a6cada42c067c3d9bef17199903ebf19acb91f419af8e221ba508c3d230e4b2e061bda644f22b7ab2ee09a6c2841d721baa327e4982e350df59bc2a55929d0df688c3e2a7c057cbef39a3a1dfbb5d5d1d1e0e3ed8835c2b30422813776382ff1059d030217584fedba042dd1f55d7aea9d0a5470c5", 0x84}, {&(0x7f0000000200)="9863039163413c3c30823af1ff0591d7c20653e02a43d788e69a6f435e24b317e702a5c7ac6ab7c611bed72c49ccf7eb270080", 0x33}], 0x3, 0x0, 0x0, 0x20000014}, 0x20040004) 23:35:45 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x8e) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x7ff, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x4000000000000, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x4, @ipv4={[], [], @remote}, 0x1c000000000}}, [0x71a, 0x4, 0x0, 0x0, 0x9, 0x7, 0x6, 0x1a4f, 0x0, 0x6, 0x6, 0xca, 0x0, 0xff, 0x6]}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r1, 0x6ad, 0x7, 0x4, 0x4, 0xfffffffffffffff7, 0x100000000, 0x8001, {r1, @in6={{0xa, 0x4e24, 0x3, @mcast1}}, 0x1, 0x88, 0x100, 0x2, 0x90e}}, &(0x7f0000000000)=0xb0) bind$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x9, 0x73, 0x280, 0xfffffffffffffbff, @remote}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfe800000, 0x0, 0x54}, 0x98) 23:35:45 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x0) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:45 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x541080, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000580)={{0xfffffffffffff20f, 0x3}, {0x8, 0x5}, 0x2, 0x5, 0x5}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}) 23:35:45 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:45 executing program 2: syz_emit_ethernet(0x6f, &(0x7f0000000200)={@link_local, @random="71f6f598b11f", [{[{0x9100, 0x1, 0x0, 0x4}], {0x8100, 0x2, 0x6, 0x3}}], {@ipx={0x8137, {0xffff, 0x59, 0x1, 0x5, {@current, @broadcast, 0x3f}, {@broadcast, @random="cd5cf1d0aa0b", 0x4}, "28bdd07963ffbbdba2ae4591fc09278a1f306084a049ea8f95a569ac7b467eed0e2c3db20a3695178ab3c830d19cc409b42e81ea541d50672188f2"}}}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) fcntl$addseals(r0, 0x409, 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 23:35:45 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x0) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}}, 0xe) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/153, 0x99) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000400), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)=0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x1ff, 0x4) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000280)=0x3, 0x4) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) getpid() open(0x0, 0x400840, 0x2) recvmmsg(r0, &(0x7f0000007fc0)=[{{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/217, 0xd9}], 0x1, &(0x7f0000000600)=""/202, 0xca}, 0x9}, {{&(0x7f0000000540)=@ipx, 0x80, &(0x7f0000001980)=[{&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/70, 0x46}, {&(0x7f0000000900)=""/20, 0x14}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/12, 0xc}], 0x5, &(0x7f0000001a00)=""/41, 0x29}, 0x4}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001a40)=""/197, 0xc5}, {&(0x7f0000001b40)=""/238, 0xee}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)=""/162, 0xa2}, {&(0x7f0000001d40)=""/143, 0x8f}], 0x5, &(0x7f0000001e80)=""/47, 0x2f}, 0x9}, {{&(0x7f0000001ec0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001f40)}, 0xef6}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001f80)=""/190, 0xbe}, {&(0x7f0000002040)=""/23, 0x17}, {&(0x7f0000002080)=""/35, 0x23}, {&(0x7f00000020c0)=""/241, 0xf1}, {&(0x7f00000021c0)=""/27, 0x1b}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000002200)=""/114, 0x72}, {&(0x7f0000003340)=""/221, 0xdd}], 0x8, &(0x7f0000003440)=""/239, 0xef}, 0x7}, {{&(0x7f0000003540), 0x80, &(0x7f0000003740)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/249, 0xf9}, {&(0x7f00000036c0)=""/114, 0x72}], 0x3}, 0x80000001}, {{&(0x7f0000003780)=@alg, 0x80, &(0x7f0000007c40)=[{&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000003800)=""/112, 0x70}, {&(0x7f0000003880)=""/161, 0xa1}, {&(0x7f0000003940)=""/70, 0x46}, {&(0x7f00000039c0)=""/86, 0x56}, {&(0x7f0000003a40)=""/29, 0x1d}, {&(0x7f0000006ac0)=""/143, 0x8f}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/175, 0xaf}], 0x9, &(0x7f0000007d00)=""/156, 0x9c}, 0xa40}, {{&(0x7f0000007dc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000007f00)=[{&(0x7f0000007e40)=""/167, 0xa7}, {&(0x7f0000003a80)=""/5, 0x5}], 0x2, &(0x7f0000007f40)=""/77, 0x4d}, 0x800}], 0x8, 0x2001, 0x0) sendmsg$netlink(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@int=0x8001, 0x4) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0x100000000000cf50, 0x4) 23:35:46 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9a, 0x200000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x5, 0x3, 0x16, 0xc, 0x3, 0x1, 0x80, 0x48, 0x1}) 23:35:46 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x541080, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000580)={{0xfffffffffffff20f, 0x3}, {0x8, 0x5}, 0x2, 0x5, 0x5}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}) 23:35:46 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x0) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:46 executing program 1: inotify_init1(0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xffff, 0x9cad4a4be2fecbe9) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x81, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x200, 0x70bd2d, 0xb44, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000004) ioctl$KDSKBMODE(r1, 0x541b, &(0x7f0000000080)) 23:35:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$KEYCTL_PKEY_ENCRYPT(0x2, 0x0, 0x0, &(0x7f00000001c0)="ebc38a97d2ac535c462f0e82ddcd5257c77cf896e0e538a29acbfa16aac930656cd74ad702a5e2c49486ccf809b651d63131e133a415e6ae12f33e7bf44f6764d397020aacd981ecc2c457", 0x0) 23:35:46 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x100000000, 0x0, 0x4aed0246, 0x2}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r1, 0xff00000000}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="df0acece310cda7eae36eff5a6e24089"}, 0x1c) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000180)="8b9f1203f5ff8402d573d8668cf0f15d75fa5ed0cab26703f1f39377d48862277eede633d12c34cd373117156579416cf3effe9efa77b3d27181a09b790fa991b69dd975b5b77e7f97e48a6899e63e5b6d37a509cac584cdf819c788be49cbebbe15005d3fb6ec19", 0x68) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000080)) 23:35:46 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:35:46 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000280)={0x5, 0x5, 0x4, 0x9, 'syz0\x00', 0x1}) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000200)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ip6gre0\x00', 0x100}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ix6_\x81ti0\x00', 0x403}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) close(r0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000002c0)={0x5002, 0x10f000, 0x8, 0x3f, 0xc1e4}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x501000) mq_open(&(0x7f0000000000)='\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x2, 0x80, &(0x7f0000000040)={0x7db, 0x80, 0x732d, 0xcf19, 0x461f1822, 0x0, 0x5, 0x40400}) 23:35:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x10, 0x0}, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x8, 0x424000) write$P9_RLOPEN(r1, &(0x7f0000000240)={0x18, 0xd, 0x2, {{0x10, 0x3, 0x7}, 0x6}}, 0x18) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000780)) fchdir(r2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000600)="3047b5b0ead3761cd4872c5a4fd00a06c32120260d863ee72de9b9abe382ab36ff3abc1174e0e55b2d10f9e3f94ff9d30eef983c6fc330bb234633e370148d02d15ef5983083d84d729542ec8543698c3aed9ceffd96a8d3d3fddf7d398ee8ca1725d9e569970588de0b7b3a54a91cd375bab848f6a907a6d3559c41bf6155014ac7bb04b910a42131570f429d7f19e4fd45", 0x92) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0xfffffffffffffffe) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x10000) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_open_dev$vcsn(0x0, 0x9, 0x2000) 23:35:47 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f000079bffc), &(0x7f0000000000)=0x4) 23:35:47 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000302ff20fd4354c020b114f910009c4a96008e64ef725cb554872a", 0x1f) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0xffffffffffffff01, 0x4) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x82000, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x8001, 0x3, 0x9, 0x2, 0x6, 0x10001, 0x232, 0x40, 0x3d1, 0x1ff, 0x22, 0x38, 0x2, 0x4, 0x2, 0x1ff}, [{0x5, 0xf07, 0x3f, 0x1ff, 0x100000000, 0x4, 0x7f, 0x7}, {0x7, 0x1, 0x86, 0x0, 0x200, 0x80000000, 0x0, 0xc53}], "519740976b74eca014cb037bac4b4dd6c73e035258b574f0bda26f6457952884658cff486ca282f0b7b5b0f1b9f115bb3aeeb7583b146da068689835e58f865cc741f635f08ebaa1dde00bbb585603148567ed00d25af993fe02056f7e6252efe368082e51f83168efef336c4a1bc8fb05c0c355cb25e09cfde38c2e08fa4d8ac5c41a7d017aa35d78b346518e890767f42d77d72ecc32a054fc083f108f7604b4aff82a2fdb1e4018cb9c5e6f89e1c50c4fd250dcb105c7fa9567ab2ee933", [[]]}, 0x26f) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000100)={0x5b, "985ef64a0ba432263dedef87bc039236128b65b9d74cb23f8542dd6a6705913ab59273f037995929b8b9d9fa661ba28fb2d038bf4fab182fd71f4f5bec27e520ed365b2bee433da47c5ff5f48f9a1a5856437ca62bf2f4eb6d33fa981ed77f8bb1ea806bd0783f6344041e8fb6972c9117bf03b87012950b039bdc64b78ee320"}) 23:35:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:47 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x800000090) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002012, r0, 0x0) msync(&(0x7f0000228000/0x4000)=nil, 0x4000, 0x4) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) [ 236.223078][ T9075] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'. 23:35:47 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x8000, 0x1, 0x200, 0x3f, &(0x7f0000000080)=[{}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) [ 236.299214][ T9075] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.380597][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 236.380614][ T26] audit: type=1800 audit(1552952147.811:31): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16633 res=0 23:35:47 executing program 2: times(&(0x7f0000000040)) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x400, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) 23:35:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000540)='./file0\x00', 0x8400, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000580)={0x14, 0x0, 0x3}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='[)+\x00'}, 0x10) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f00000003c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x100, 0x0) 23:35:47 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 236.598508][ T26] audit: type=1804 audit(1552952147.851:32): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir134523776/syzkaller.d8GxL5/33/file0/file0" dev="sda1" ino=16633 res=1 23:35:48 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x8000, 0x1, 0x200, 0x3f, &(0x7f0000000080)=[{}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) [ 237.080948][ T26] audit: type=1804 audit(1552952148.521:33): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir134523776/syzkaller.d8GxL5/33/file0/file0" dev="sda1" ino=16633 res=1 23:35:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x100, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)={{0x2, 0x1, 0x7, 0x1, 0x9, 0xff}, 0x20}) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x255, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x3, &(0x7f00000001c0)="5ce69e2eddbd317d7886ec87ea70396a17802a6f6e1af2aebdc8a9a75333378ad9d2602896d783598396f33108e6280b6cb1dc6ee571b262ca7b96556c309b0d20ae85a60f2579454663913b6a79c007a7f190710bb8aabd9056786bde811554f081497205a98441ffe27f183ce21cc660be9612035ccc11192042d43a32ff9820") getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000040)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) setreuid(r3, r4) 23:35:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000540)='./file0\x00', 0x8400, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000580)={0x14, 0x0, 0x3}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='[)+\x00'}, 0x10) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f00000003c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x100, 0x0) [ 237.124731][ T26] audit: type=1804 audit(1552952148.551:34): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir134523776/syzkaller.d8GxL5/33/file0/file0" dev="sda1" ino=16633 res=1 23:35:48 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0xb, &(0x7f0000000100)={0x0, @remote, 0x0, 0x0, 'dh\x00'}, 0x3) 23:35:48 executing program 1: ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x3e188bd893f16ffd) write$P9_RCLUNK(r0, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) 23:35:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:48 executing program 2: r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000001380), 0x80, &(0x7f00000017c0)=[{&(0x7f0000001400)=""/113, 0x71}, {&(0x7f00000015c0)=""/87, 0x57}, {&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000001740)=""/112, 0x70}], 0x5, &(0x7f0000001840)=""/198, 0xc6}, 0x40000121) r2 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000001580)="00000000fa060000000000000000000000000000", 0x14, 0x20000, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001980)=ANY=[@ANYBLOB="02009f00b7335443e094cfa4448b3e53696e41c52f17f8b8d21cbdff60956366e94b9fa2da9c986872eddef9e70e00858cdfe8322b3951e42dd6db83d5f8868c9541c0ac7fd99db9589bcd49d7ab883b74fb9a021976ebf8f8dd88ff743b0fcbf40cf3517b1b3e70972615860821040fbd842e21ff941bc12e2cafa7ac156c13c214c785e09598b0ddc4c294e382b89bbba835cb12d21ee1f6964d65eb1793e203466d6a4aa25079e67df661d4c383fa16e9df97e7e75237c3c2bf2caf4d4a44ebb7064652d3576b6eb45ae79a36fdac7df47a2ba4575b10ff9c4349f2568fc50cef23628f662786a6b1f283f2014160c9ced5f094b57abcb74e38a3fd539979c9bceaf437255601f9eefb6e9831f8a5d49f8e4ca254fb586326a55a411dd42e500c19ea23b9472ba05c4e31ace01adff594fb0385805c787dbe87a237df0bf6e5b55808d1376888fbaf2790fd36ac73b77d8d6bf368692cb1c3bcfa64182e0253e092e8542bb6efd19158da26da74c86f7158eb5a1fa32466a37525b54b047c81b159db22a664009ad9766d1dc3311e92d30725177b8d27d29365f44409299831b6a40cbbe4068fbf9327034bdd44ac2647c404f512db7daa7746a1dde0640bc188862bad818b0888f8bb4ed2a20ea0d0e7087a02fb3889b6ad0637193614b6be672d"]) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001480)={@in6={{0xa, 0x4e22, 0xed5, @mcast1, 0xff}}, 0x0, 0x800, 0x0, "7141a571e255eac77b763a9e94691e416983ba4dbfe4a918305afe679ee4c46cc2ea13d132baccb87f45815de631fe0dcc707ed97e07e90dbe7e3321107cc54e8182a1e07cbfa3fdf74929a97321a46b"}, 0xd8) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000f80)={0x374, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x5de6}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x49ef, @mcast1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff4}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffbff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0xffffffffffff8001}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x37bb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bind$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001340)) recvmmsg(r2, &(0x7f0000004840)=[{{&(0x7f0000000100)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/112, 0x70}, {&(0x7f0000000680)=""/229, 0xe5}], 0xa, &(0x7f0000000840)=""/250, 0xfa}, 0x3}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f0000000a80)=""/216, 0xd8}, {&(0x7f0000000b80)=""/48, 0x30}, {&(0x7f0000000bc0)=""/110, 0x6e}], 0x4, &(0x7f0000000c80)=""/253, 0xfd}, 0x8000}, {{&(0x7f0000000d80)=@nfc_llcp, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/220, 0xdc}], 0x1, &(0x7f0000000f40)=""/3, 0x3}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)=""/211, 0xd3}}], 0x4, 0x0, &(0x7f0000003700)={0x77359400}) 23:35:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00@\x00', 0x101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) fcntl$getownex(r2, 0x10, 0x0) getpgid(0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(0x0) getpgrp(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(r2, 0x0, 0xfffffffffffffeb8) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0xffffffff00000000) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x3cf) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0xffffffa7) 23:35:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000080)=0xfffffffffffffce8) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400080, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:35:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4081806) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) socketpair$unix(0x1, 0xffffe, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = getpid() capset(0x0, &(0x7f0000000400)={0xe609, 0x0, 0x5, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x101104, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) r6 = epoll_create1(0x80000) r7 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000200)={0x41}, 0x10) bind$tipc(r7, 0x0, 0x0) r8 = dup2(r7, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x2000}) gettid() close(r5) r9 = syz_open_procfs(r3, &(0x7f0000000a80)='\x00\n\x00c') close(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @multicast2}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@empty, @in6=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x5, 0x5ef}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000001c0)={r10, 0x4}, &(0x7f0000000240)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@broadcast, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) stat(&(0x7f0000000440)='./file0\x00', &(0x7f00000008c0)) getresgid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)) getgid() [ 237.435281][ T9150] device lo entered promiscuous mode 23:35:49 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:35:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000001c0)="e8607428d2762f5de2d3c0b359842c9461b90d1a772c60a685c74d156085a2c28c4b88867dce68f0692b2448fca307098cbb37a9710a2365b55c08e437c8b2cb0fac9a1d733a936c50ed1bbf204ad92de00b733cc2e6e0f21925c7ed5fabb07f1aa4af1f97f09a3200b2c7656b7ed697af4fb60e0988c1fd0239a364e8675453f759374fadd9b877dacdd77166c69a0fe16e6b26812e0d235d5df07d4ab85ad17a2dabb3651ad238a10c21fc886d5bf599ebcaf19fa680f3e908746e1da1d91240c96ab24f4524272d5aafe3d20c782d639990619414d67a") 23:35:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000600)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) r2 = shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/171) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x17d, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f00000001c0)={0x0, 0x10d000}) ioctl$TIOCSLCKTRMIOS(r1, 0x5437, 0x0) 23:35:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x43f, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f00000001c0)={0x1, 0x300}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000040)}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000180)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000000200), 0x40000, 0x0, 0x0, 0x0) 23:35:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:49 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x1, 0x101000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf800000000000000, 0xb}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) request_key(0x0, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x470041) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000040)={0x3, "a65c865fe2c01facee2356dc38ea54f9ce73e3c3e33a19ba29fd0738c5382345", 0x1, 0x1}) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, &(0x7f00000006c0)="0af51f023c123f3188a070") 23:35:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x43f, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f00000001c0)={0x1, 0x300}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000040)}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000180)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000000200), 0x40000, 0x0, 0x0, 0x0) 23:35:49 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f00000000c0)="06", 0x1) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000200)) socket$inet_smc(0x2b, 0x1, 0x0) 23:35:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r2 = dup2(r1, r1) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xffeb) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0)=0x1) 23:35:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:50 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 23:35:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x600000, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000f40)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340), 0x87}]) 23:35:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x1, 0x101000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf800000000000000, 0xb}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) request_key(0x0, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x470041) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000040)={0x3, "a65c865fe2c01facee2356dc38ea54f9ce73e3c3e33a19ba29fd0738c5382345", 0x1, 0x1}) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, &(0x7f00000006c0)="0af51f023c123f3188a070") 23:35:50 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:35:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x3, 0x1}, 0xe) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000045) 23:35:50 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x1, 0x101000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf800000000000000, 0xb}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) request_key(0x0, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x470041) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000040)={0x3, "a65c865fe2c01facee2356dc38ea54f9ce73e3c3e33a19ba29fd0738c5382345", 0x1, 0x1}) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, &(0x7f00000006c0)="0af51f023c123f3188a070") 23:35:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x70, 0x800, {"a2e6363ced031b626413e370b11c4d28fd4402fd00847311d77ae8acc665873d7ef3be0a8b358a444b6e2db53951f2ff95f1cdcf82b3668533fd56e938f4e9c3ee7f7926ea713ef05c98201acd6dc748b26d180a4ea75f"}}, {0x0, "44e3f8"}}, &(0x7f0000000140)=""/155, 0x75, 0x9b, 0x1}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000001440)={{0x2}}) 23:35:50 executing program 2: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@v2={0x7, 0x0, 0xf, 0x6, 0x78, "2487dcf7c7f3a23fb256d88f4bec542fc2e4cb2a51f80d7b7f99d1ce2d95ee74424eaf7c7eeaf588e5addb144398087c7e9f4cef751cdb6b710fd7085321a7f98c55dcf855bdb15a728c44923f713baf884e522a8b240fc14b4d4acba455e85f18012dafcc6762b61602178a3624b9f7855e313efbebb346"}, 0x82, 0x1) sendfile(r1, r1, 0x0, 0x8000fffffffe) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000100)={0x0, 0x2, 0x79a2, 0x2, 0x8, 0x8, 0xfff, 0x4000000010001, 0x3, 0xbbdf, 0x100, 0x19945e00}) [ 238.936282][ T26] audit: type=1800 audit(1552952150.371:35): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16670 res=0 23:35:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000000) 23:35:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) [ 239.507860][ T9226] dccp_close: ABORT with 2122 bytes unread 23:35:51 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 23:35:51 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') exit(0x0) pread64(r0, 0x0, 0x0, 0x0) 23:35:51 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) 23:35:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:51 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) [ 239.569709][ T26] audit: type=1800 audit(1552952151.011:36): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16670 res=0 23:35:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:51 executing program 1: getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x30}, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000002c0)="de0f4f947d210ec2bc7e1e689bb5fd58f435274a01c6075f2bfcbab5d4825b0c7cf8a2f5ba39ee1fbfd87dccf10130f8", 0x30, 0xfffffffffffffffe) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x2, 0x0) r2 = geteuid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) write$FUSE_ATTR(r1, &(0x7f0000000300)={0x78, 0x0, 0x8, {0x6, 0x800000000000, 0x0, {0x4, 0x3, 0x3, 0xff, 0x1, 0x9, 0x2, 0x8, 0x5, 0x7, 0x6, r2, r3, 0xfff, 0xd7b1}}}, 0x78) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r4, r4}, &(0x7f00000000c0)=""/83, 0xfffffee7, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc2000, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000040)) 23:35:51 executing program 2: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=@v2={0x7, 0x0, 0xf, 0x6, 0x78, "2487dcf7c7f3a23fb256d88f4bec542fc2e4cb2a51f80d7b7f99d1ce2d95ee74424eaf7c7eeaf588e5addb144398087c7e9f4cef751cdb6b710fd7085321a7f98c55dcf855bdb15a728c44923f713baf884e522a8b240fc14b4d4acba455e85f18012dafcc6762b61602178a3624b9f7855e313efbebb346"}, 0x82, 0x1) sendfile(r1, r1, 0x0, 0x8000fffffffe) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000100)={0x0, 0x2, 0x79a2, 0x2, 0x8, 0x8, 0xfff, 0x4000000010001, 0x3, 0xbbdf, 0x100, 0x19945e00}) 23:35:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) [ 239.848744][ T9296] QAT: Invalid ioctl [ 239.861212][ T9299] QAT: Invalid ioctl 23:35:51 executing program 1: getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x30}, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000002c0)="de0f4f947d210ec2bc7e1e689bb5fd58f435274a01c6075f2bfcbab5d4825b0c7cf8a2f5ba39ee1fbfd87dccf10130f8", 0x30, 0xfffffffffffffffe) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x2, 0x0) r2 = geteuid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) write$FUSE_ATTR(r1, &(0x7f0000000300)={0x78, 0x0, 0x8, {0x6, 0x800000000000, 0x0, {0x4, 0x3, 0x3, 0xff, 0x1, 0x9, 0x2, 0x8, 0x5, 0x7, 0x6, r2, r3, 0xfff, 0xd7b1}}}, 0x78) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r4, r4}, &(0x7f00000000c0)=""/83, 0xfffffee7, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc2000, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000040)) [ 239.893759][ T26] audit: type=1800 audit(1552952151.331:37): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16682 res=0 23:35:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) [ 240.135485][ T9307] QAT: Invalid ioctl 23:35:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) [ 240.484164][ T9275] dccp_close: ABORT with 1061 bytes unread 23:35:52 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 23:35:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'gre0\x00\x00\x00\x00\x00\x00\x80c\x00', 0x2}, 0x16) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x400, 0x440) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x6, 0x1, 0x20, 0x3f}, 0x6) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}}) ioctl(r2, 0x8936, &(0x7f0000000000)) 23:35:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='rdma.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000680)={0xfff, 0x1}) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x10507e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000400)=[0x7, 0x81]) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x30, 0xffffffffffffffff, 0x0) connect$inet(r4, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="88192ead1b95c0d86a8c73cf648685a88406627efe2435911ac6b5debf4eb330720a70aa1cb3e2a4acd924c6be0788bb567b9f32ac220462d0b202d8e8d780994203ac15cc477ba6028b0983ce685297a286efd7c5e942879ed2fb4083fd6952345347f2311606d6ccd53a2827e16674dbffab4bba8461bb03cdfa77b3bd521d4c8e2c0dff2fe0caad755310166fef0e65d5f253cc8953de0f4d1e5c9cbf43412b", 0xa1}, {&(0x7f0000000240)="07532fceb0a158ac1f9199d539e2078e7f13f0dff2d3886ce0c07eea90a3c9fbb3a7f81f9155ae17880bdb87fc1239ffd5b700f6016e514a52a4ff3e3328c7c5896799c7c043911828474750148e55e0ddcb717e49b78353ab074de60ad9393441fc8b1385ac68166e807d1937029d00280cdc4de25ca0d5c02a35b98dc1c2257bb79b2b87ce290cdcd664bbbf85f6f237bf85ff127a1b7bb44c03809b5b2e494d1672ccfd1cb54cea9b6bc067fed07679cd04a0825510574327b9aff152e721e90ff73727827e104bfa63", 0xcb}, {&(0x7f0000000500)="47491240f5738064b074eb3d46f2c2344038b87a44ce2e17404fc907b83da3a957fbfb77a2f5a91ca3e50586edb851d2db4dd8fc6c0d7147ac6de4feba706c1f8f516acfad4ec0fb", 0x48}], 0x3, &(0x7f0000000580)="032bc69f227e67c6d72c3a74d4a95104a32ba4e1cecc9ed576f57dcd87f92d80167d2d599898e296d7ace424c52d833df9f80ca60c8ba8c38053f1bd4bcadd616a8ca8cffb8aee8af6550433f375d82bef8bcb002036aa13b312d5f786762a2ba54478b2a164167d9f901359cf75421a20de54d0305083b34f588db80ecae0a1a66a38c6dc1aca96931be0066cab2b86c59051fc14328a27aeb802786033002a3df3da", 0xa3, 0x8000}, 0x20040005) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r6 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)) ftruncate(r5, 0x0) close(r6) close(0xffffffffffffffff) 23:35:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a31b3764701795788238c540800"], 0x10) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x620}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c0000008ca2cde7056476658c6ec2326f2e4666953d7002cef4b55552e8f814f982009151edd670dace555c56500b8457cd07db63923479fc7718a4e01edec800ebd7accecc2a292e1449768a8c8683f354a2e33924c812bdf3fe105b939fb7088fd280653bd4cd00720a0575b4ea54811395a057a41a7417db8341143beb757bf98ef046ca1d8fdf006761bef777aca7d7d602eccb98d2ea7f1ddd1c5d34bd548d6d5d97fe5296e1e0b499f85e532974b922b678ddc05b697b89d317821a093efbf048bd1aadb984df2cd7", @ANYRES16=r4, @ANYBLOB="04012bbd7000fbdbdf250b0000004000010014000300ff0100000000000000000000000000010c0007000400000001000000140003006eebfd8a37600bfba2faf3c827ed755e080004004e24000014000100080002006f00000008000b00736970000c000100080008007d0c0000080004000000c001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}}, 0x0) fsetxattr$security_evm(r3, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "42a19b98be7944a2e0fafa1bdab021c07d14701b"}, 0x15, 0x2) 23:35:52 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:35:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, 0x0) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000080)=""/20) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000000c0), 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10001, 0x187400) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast1}], 0x10) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000100)=""/172, &(0x7f00000001c0)=0xac) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001b40)=ANY=[], 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 23:35:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001e0000000000000e68830418f0b0fd476034279101704766230d24a1133823bba672aa45b5690cb1079a6e3d1aa9379086ad3c5ed8a43cfa3ee6c35f14c0d69fed3e9c6e97ebdb76a396b8abacbac3cbc55503181d1fd9a2cda065eb9f1e27ede17a711f3e8703f437ce8a477b73fe1c09956e0ec3899ef4e45cf79d45ac2d50fce999c31da19d3336a4d8b2043fa40ce86856c7a193b0d0e5a6e98cc20d6f"], 0x14}}, 0x0) r1 = socket(0x4000000000010, 0x80005, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x41, &(0x7f0000000100)}], 0x492492492492805, 0x0) 23:35:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:52 executing program 2: r0 = socket(0x12, 0xb, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000480)=0x5) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0xbc}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) 23:35:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7f, 0x200040) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x12714, 0x2, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x20000000000000}}, &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xff3b, 0x8a, &(0x7f00000042c0)="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", 0x0, 0x5}, 0xfffffdc5) 23:35:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='rdma.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000680)={0xfff, 0x1}) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x10507e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000400)=[0x7, 0x81]) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x30, 0xffffffffffffffff, 0x0) connect$inet(r4, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="88192ead1b95c0d86a8c73cf648685a88406627efe2435911ac6b5debf4eb330720a70aa1cb3e2a4acd924c6be0788bb567b9f32ac220462d0b202d8e8d780994203ac15cc477ba6028b0983ce685297a286efd7c5e942879ed2fb4083fd6952345347f2311606d6ccd53a2827e16674dbffab4bba8461bb03cdfa77b3bd521d4c8e2c0dff2fe0caad755310166fef0e65d5f253cc8953de0f4d1e5c9cbf43412b", 0xa1}, {&(0x7f0000000240)="07532fceb0a158ac1f9199d539e2078e7f13f0dff2d3886ce0c07eea90a3c9fbb3a7f81f9155ae17880bdb87fc1239ffd5b700f6016e514a52a4ff3e3328c7c5896799c7c043911828474750148e55e0ddcb717e49b78353ab074de60ad9393441fc8b1385ac68166e807d1937029d00280cdc4de25ca0d5c02a35b98dc1c2257bb79b2b87ce290cdcd664bbbf85f6f237bf85ff127a1b7bb44c03809b5b2e494d1672ccfd1cb54cea9b6bc067fed07679cd04a0825510574327b9aff152e721e90ff73727827e104bfa63", 0xcb}, {&(0x7f0000000500)="47491240f5738064b074eb3d46f2c2344038b87a44ce2e17404fc907b83da3a957fbfb77a2f5a91ca3e50586edb851d2db4dd8fc6c0d7147ac6de4feba706c1f8f516acfad4ec0fb", 0x48}], 0x3, &(0x7f0000000580)="032bc69f227e67c6d72c3a74d4a95104a32ba4e1cecc9ed576f57dcd87f92d80167d2d599898e296d7ace424c52d833df9f80ca60c8ba8c38053f1bd4bcadd616a8ca8cffb8aee8af6550433f375d82bef8bcb002036aa13b312d5f786762a2ba54478b2a164167d9f901359cf75421a20de54d0305083b34f588db80ecae0a1a66a38c6dc1aca96931be0066cab2b86c59051fc14328a27aeb802786033002a3df3da", 0xa3, 0x8000}, 0x20040005) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r6 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)) ftruncate(r5, 0x0) close(r6) close(0xffffffffffffffff) 23:35:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {0x0}]}) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000180)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={r2, &(0x7f0000000100)=""/42}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) [ 241.508927][ T9321] dccp_close: ABORT with 1061 bytes unread 23:35:53 executing program 0 (fault-call:5 fault-nth:0): syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:53 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:35:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:53 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1\x00', r3}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1a, &(0x7f0000000580)=[{&(0x7f0000000480)=""/252, 0xfc}], 0x1, 0x0) 23:35:53 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x40) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000080)=""/197) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000180)=@ethtool_ts_info}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={[], 0x7fffffff, 0x1, 0x3, 0x0, 0x0, 0x7002, 0x100000, [], 0x25cb}) 23:35:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00'}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='rdma.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000680)={0xfff, 0x1}) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x10507e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000400)=[0x7, 0x81]) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x30, 0xffffffffffffffff, 0x0) connect$inet(r4, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="88192ead1b95c0d86a8c73cf648685a88406627efe2435911ac6b5debf4eb330720a70aa1cb3e2a4acd924c6be0788bb567b9f32ac220462d0b202d8e8d780994203ac15cc477ba6028b0983ce685297a286efd7c5e942879ed2fb4083fd6952345347f2311606d6ccd53a2827e16674dbffab4bba8461bb03cdfa77b3bd521d4c8e2c0dff2fe0caad755310166fef0e65d5f253cc8953de0f4d1e5c9cbf43412b", 0xa1}, {&(0x7f0000000240)="07532fceb0a158ac1f9199d539e2078e7f13f0dff2d3886ce0c07eea90a3c9fbb3a7f81f9155ae17880bdb87fc1239ffd5b700f6016e514a52a4ff3e3328c7c5896799c7c043911828474750148e55e0ddcb717e49b78353ab074de60ad9393441fc8b1385ac68166e807d1937029d00280cdc4de25ca0d5c02a35b98dc1c2257bb79b2b87ce290cdcd664bbbf85f6f237bf85ff127a1b7bb44c03809b5b2e494d1672ccfd1cb54cea9b6bc067fed07679cd04a0825510574327b9aff152e721e90ff73727827e104bfa63", 0xcb}, {&(0x7f0000000500)="47491240f5738064b074eb3d46f2c2344038b87a44ce2e17404fc907b83da3a957fbfb77a2f5a91ca3e50586edb851d2db4dd8fc6c0d7147ac6de4feba706c1f8f516acfad4ec0fb", 0x48}], 0x3, &(0x7f0000000580)="032bc69f227e67c6d72c3a74d4a95104a32ba4e1cecc9ed576f57dcd87f92d80167d2d599898e296d7ace424c52d833df9f80ca60c8ba8c38053f1bd4bcadd616a8ca8cffb8aee8af6550433f375d82bef8bcb002036aa13b312d5f786762a2ba54478b2a164167d9f901359cf75421a20de54d0305083b34f588db80ecae0a1a66a38c6dc1aca96931be0066cab2b86c59051fc14328a27aeb802786033002a3df3da", 0xa3, 0x8000}, 0x20040005) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r6 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)) ftruncate(r5, 0x0) close(r6) close(0xffffffffffffffff) 23:35:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mISDNtimer\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) syz_genetlink_get_family_id$ipvs(0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) semop(0x0, &(0x7f0000000400), 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) 23:35:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00'}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:53 executing program 4: socketpair$unix(0x1, 0x1000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000400)="aa803199a0e537df8894c81eaaeafa1f06ea0caa17fa2866f84b08278099ddb8572d6681dc3f66df6bbf6e3efc61cb57c6b6eb14bee8d7082d9f324ce090c58210d0387b427e09db9c4233934aa0a6a7", 0x50, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) sendto$llc(r2, &(0x7f0000000140)="43771da581b3a0714d581d8f3f40a9a0361b830bdf6c872f6a4e50efc4b411c16871a6", 0x23, 0x4000001, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 23:35:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00'}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:53 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d}, 0x0, 0x0, 0x0, 0x0) 23:35:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) [ 242.563312][ T9378] dccp_close: ABORT with 1061 bytes unread 23:35:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x80) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) recvfrom$packet(r1, &(0x7f0000000080)=""/209, 0xd1, 0x22, &(0x7f0000000240)={0x11, 0x1f, r2, 0x1, 0xff, 0x6, @random="69e9298da0d3"}, 0x14) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r3, &(0x7f00000001c0)="de0007d369a368ae86bcbc45e0355f755c2a3663630ac998d46f67fc857b99de", 0x20, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 23:35:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:54 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000500)=0x301000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={r1, 0x7fffd, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r2, r4}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000380)={'nat\x00'}, &(0x7f0000000400)=0x54) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000440)) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000001c0)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x50, r3, 0x0) perf_event_open(0x0, r5, 0x0, r0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x604, 0x0, "6f54f136c56fd4711e96092a4a42e705ad5ff5156084e76ab3590b72fd9504c2ae44710e0cd11376acd08b3e74164de43cdc9ba4d9a87784a1a6f5903d8258357a06eb624d45054ac2631e06ef59bf12"}, 0xd8) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg(r7, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0), 0xd4}}, {{&(0x7f0000005900)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x80, &(0x7f0000007ac0), 0x117, &(0x7f0000007b00), 0x297}}], 0x3fffffffffffe0d, 0x0) 23:35:54 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 23:35:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:54 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x0) 23:35:54 executing program 1: syz_mount_image$msdos(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) clock_gettime(0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000540)={0xfffffffffffffffc, 0x5, 0x4, 0x0, {}, {0x3, 0x0, 0xfff, 0x7, 0x4, 0x8b7, "40f596a4"}, 0x9, 0x3, @fd=0xffffffffffffffff, 0x4}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000240)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000500)=[0x0]) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x23) setsockopt$inet6_dccp_int(r2, 0x21, 0x1, &(0x7f00000004c0)=0x3, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x20400) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x90c6, 0x40, 0x0, 0xf, 0x17, 0x4, "8fff655044a7c9e6f1662d779e3d75a76a704cb06de91a7ef18c5eee34185caba98ce604d90ca0282d9ca7a84463162d928b4d0d95c87ddcf0911a714ba2d08e", "a7a4bb256182a74f4829a7fdee66c62f374e4c0dfb1dd515783df3878bf479c28f18dd1e2a5825025a2de31c110b708abc784b452378b3e0dbb89257dc495f68", "f52f6d24f2eb71a2ab750adcc65dbe024f60a3f5f4464c1a7dc8f4a434255514", [0x7, 0xfffffffffffffffb]}) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7ff}, &(0x7f00000002c0)=0xfffffffffffffde1) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}}) ioctl(0xffffffffffffffff, 0xffffffffbfffffc9, 0x0) 23:35:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x2, 0x1) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7f, 0x101000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x7) 23:35:54 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfb81, 0x20000) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'yam0\x00'}}) r1 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x7ff, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x8, @ipv4={[], [], @broadcast}, 0x4}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x3f, 0x1}, 0x8) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)) ioctl$TCSBRK(r0, 0x5409, 0x8000) 23:35:54 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x10}, 0x0, 0x0, 0x0, 0x0) 23:35:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:54 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r6, r7+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) r8 = dup2(r5, r1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r4, 0x67b, 0x2fe3}, &(0x7f0000002a80)=0xc) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x2, 0x40, 0x3011, 0x8, 0x5, 0xa, 0x0, 0x4}}) getuid() 23:35:54 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) [ 243.403612][ T9441] dccp_close: ABORT with 10633 bytes unread 23:35:54 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x700}, 0x0, 0x0, 0x0, 0x0) 23:35:54 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) [ 243.518656][ T9506] QAT: Invalid ioctl [ 243.643132][ T9506] QAT: Invalid ioctl 23:35:55 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r6, r7+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) r8 = dup2(r5, r1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r4, 0x67b, 0x2fe3}, &(0x7f0000002a80)=0xc) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x2, 0x40, 0x3011, 0x8, 0x5, 0xa, 0x0, 0x4}}) getuid() 23:35:55 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x1000000}, 0x0, 0x0, 0x0, 0x0) [ 244.046354][ T9530] QAT: Invalid ioctl 23:35:55 executing program 1: syz_mount_image$msdos(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) clock_gettime(0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000540)={0xfffffffffffffffc, 0x5, 0x4, 0x0, {}, {0x3, 0x0, 0xfff, 0x7, 0x4, 0x8b7, "40f596a4"}, 0x9, 0x3, @fd=0xffffffffffffffff, 0x4}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000240)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000500)=[0x0]) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x23) setsockopt$inet6_dccp_int(r2, 0x21, 0x1, &(0x7f00000004c0)=0x3, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x20400) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x90c6, 0x40, 0x0, 0xf, 0x17, 0x4, "8fff655044a7c9e6f1662d779e3d75a76a704cb06de91a7ef18c5eee34185caba98ce604d90ca0282d9ca7a84463162d928b4d0d95c87ddcf0911a714ba2d08e", "a7a4bb256182a74f4829a7fdee66c62f374e4c0dfb1dd515783df3878bf479c28f18dd1e2a5825025a2de31c110b708abc784b452378b3e0dbb89257dc495f68", "f52f6d24f2eb71a2ab750adcc65dbe024f60a3f5f4464c1a7dc8f4a434255514", [0x7, 0xfffffffffffffffb]}) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7ff}, &(0x7f00000002c0)=0xfffffffffffffde1) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffffe}}) ioctl(0xffffffffffffffff, 0xffffffffbfffffc9, 0x0) 23:35:55 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x7000000}, 0x0, 0x0, 0x0, 0x0) 23:35:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:55 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r6, r7+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) r8 = dup2(r5, r1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r4, 0x67b, 0x2fe3}, &(0x7f0000002a80)=0xc) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x2, 0x40, 0x3011, 0x8, 0x5, 0xa, 0x0, 0x4}}) getuid() 23:35:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00'}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:55 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) [ 244.498543][ T9554] QAT: Invalid ioctl 23:35:56 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 23:35:56 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) 23:35:56 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 23:35:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00'}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:56 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r6, r7+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) r8 = dup2(r5, r1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r4, 0x67b, 0x2fe3}, &(0x7f0000002a80)=0xc) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x2, 0x40, 0x3011, 0x8, 0x5, 0xa, 0x0, 0x4}}) getuid() 23:35:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00'}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:56 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) [ 245.028074][ T9579] QAT: Invalid ioctl 23:35:56 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r6, r7+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) r8 = dup2(r5, r1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r4, 0x67b, 0x2fe3}, &(0x7f0000002a80)=0xc) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x2, 0x40, 0x3011, 0x8, 0x5, 0xa, 0x0, 0x4}}) 23:35:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:56 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0) [ 245.374905][ T9607] QAT: Invalid ioctl 23:35:56 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) socket$isdn_base(0x22, 0x3, 0x0) [ 245.701667][ T9565] dccp_close: ABORT with 1061 bytes unread 23:35:57 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r6, r7+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) r8 = dup2(r5, r1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r4, 0x67b, 0x2fe3}, &(0x7f0000002a80)=0xc) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x2, 0x40, 0x3011, 0x8, 0x5, 0xa, 0x0, 0x4}}) 23:35:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:57 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r6, r7+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) dup2(r5, r1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r4, 0x67b, 0x2fe3}, &(0x7f0000002a80)=0xc) 23:35:57 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x700000000000000}, 0x0, 0x0, 0x0, 0x0) 23:35:57 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) 23:35:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, 0x0, 0x0) [ 245.908522][ T9636] QAT: Invalid ioctl 23:35:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, 0x0, 0x0) 23:35:57 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r5, r6+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) dup2(r4, r1) 23:35:57 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) [ 246.088412][ T9644] QAT: Invalid ioctl 23:35:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, 0x0, 0x0) 23:35:57 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r6, r7+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) dup2(r5, r1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r4, 0x67b, 0x2fe3}, &(0x7f0000002a80)=0xc) [ 246.255256][ T9657] QAT: Invalid ioctl 23:35:57 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) socket$isdn_base(0x22, 0x3, 0x0) 23:35:57 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r3, r4+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) 23:35:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:57 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) [ 246.460829][ T9661] QAT: Invalid ioctl 23:35:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) [ 246.745291][ T9678] QAT: Invalid ioctl 23:35:58 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) 23:35:58 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r5, r6+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) dup2(r4, r1) 23:35:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="d39473699295", 'veth1_to_bridge\x00'}}, 0x1e) 23:35:58 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 23:35:58 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r3, r4+10000000}}) 23:35:58 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r3, r4+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) 23:35:58 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x700}, 0x0, 0x0, 0x0, 0x0) [ 247.079378][ T9705] QAT: Invalid ioctl [ 247.098785][ T9706] QAT: Invalid ioctl [ 247.299900][ T9719] QAT: Invalid ioctl 23:35:58 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) socket$isdn_base(0x22, 0x3, 0x0) 23:35:58 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:35:58 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r3, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r5, r6+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) dup2(r4, r1) 23:35:58 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r3, r4+10000000}}) 23:35:58 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0) [ 247.651638][ T9740] QAT: Invalid ioctl [ 247.685857][ T9730] QAT: Invalid ioctl 23:35:59 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:35:59 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:35:59 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r3, r4+10000000}}) 23:35:59 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x7000000}, 0x0, 0x0, 0x0, 0x0) 23:35:59 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r3, r4+10000000}}) getpeername(r0, &(0x7f0000002900)=@in={0x2, 0x0, @local}, &(0x7f0000000300)=0x80) [ 248.022341][ T9761] QAT: Invalid ioctl 23:35:59 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) 23:35:59 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) [ 248.107359][ T9758] QAT: Invalid ioctl 23:35:59 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:35:59 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r3, r4+10000000}}) 23:35:59 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:35:59 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) [ 248.400538][ T9780] QAT: Invalid ioctl 23:36:00 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x6, 0x2, 0x4f0, 0x2, 'syz0\x00', 0x7}, 0x0, [0x3, 0xffff, 0x0, 0xae6d, 0x101, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x1, 0xfffffffffffffbff, 0x2, 0x0, 0x800, 0x0, 0x101, 0x5, 0x1194a00, 0x3f, 0xa0ec, 0x4, 0x0, 0xfffffffffffffffa, 0x9, 0x80000000, 0x3, 0xffffffff, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2, 0x6, 0x6, 0x7, 0x0, 0x3, 0x1, 0x569, 0x8001, 0x9, 0x2, 0x5, 0x8, 0xf8, 0xdb, 0x4, 0x9, 0x7ef6, 0x7fffffff, 0x29, 0x0, 0x3, 0x4, 0x101, 0xff, 0x5, 0x1, 0xb8, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0x5, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x100, 0x10000, 0x7, 0x0, 0x0, 0x1000000000000000, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0x2, 0x4, 0xfff, 0x9, 0x8, 0x408000, 0x5199, 0x101, 0x3, 0x3, 0x4, 0x7ff, 0xffffffffffffffb6, 0xe6, 0xfffffffffffffff7, 0x1, 0x40, 0x1f, 0x800, 0x401, 0x8, 0x8, 0x401, 0x1, 0x2, 0x80000001, 0xfffffffffffff801, 0x4, 0xffff, 0x4, 0x33c, 0x10001, 0xce5a, 0x8, 0x8, 0x6, 0x7, 0x8, 0x1, 0xdcb2, 0x2028000000, 0x80000000, 0x9, 0x3b1], {r3, r4+10000000}}) 23:36:00 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:00 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:00 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) 23:36:00 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) [ 248.889170][ T9803] QAT: Invalid ioctl 23:36:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:00 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) 23:36:00 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x700000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:00 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:00 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:00 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:00 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) clock_gettime(0x0, &(0x7f0000000200)) 23:36:01 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) clock_gettime(0x0, &(0x7f0000000200)) 23:36:01 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:01 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) 23:36:01 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) clock_gettime(0x0, &(0x7f0000000200)) 23:36:01 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) [ 250.191923][ T9831] dccp_close: ABORT with 1061 bytes unread 23:36:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:01 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:01 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:01 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:02 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x700}, 0x0, 0x0, 0x0, 0x0) 23:36:02 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:02 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:02 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0) 23:36:02 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:02 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:02 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:02 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:02 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0x0, 0x0) 23:36:02 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:03 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:03 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 23:36:03 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:03 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:03 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:03 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:03 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:03 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:03 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:03 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:04 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:04 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:04 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:04 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:04 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:04 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:04 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:04 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:05 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:05 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) 23:36:05 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:05 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:36:05 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 23:36:05 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:05 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:05 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:05 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0x0, 0x0) 23:36:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:06 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:06 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0) 23:36:06 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:06 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:06 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:06 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0x0, 0x0) [ 255.158312][T10061] dccp_close: ABORT with 1061 bytes unread 23:36:06 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:06 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:07 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 23:36:07 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:07 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:07 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:07 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:07 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:07 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:07 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:07 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:07 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:07 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:08 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r3, 0x9) r4 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r4, r4, r4, r4, r4, r4, r4, r4, r4]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r5, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:08 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:08 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={r1, 0x200}, &(0x7f0000000240)=0x8) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:08 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:08 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) [ 257.302007][ C0] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:422/tfrc_rx_hist_sample_rtt() [ 257.316476][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.1.0-rc1 #28 [ 257.323790][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.333949][ C0] Call Trace: [ 257.337415][ C0] dump_stack+0x172/0x1f0 [ 257.341869][ C0] tfrc_rx_hist_sample_rtt.cold+0x56/0x61 [ 257.347633][ C0] ccid3_hc_rx_packet_recv+0x5c6/0xeb0 [ 257.353183][ C0] ? dccp_parse_options+0x478/0x1290 [ 257.358504][ C0] ? ccid3_hc_tx_send_packet+0x880/0x880 [ 257.364167][ C0] dccp_deliver_input_to_ccids+0xee/0x280 [ 257.369906][ C0] dccp_rcv_established+0x83/0xb0 [ 257.375017][ C0] dccp_v4_do_rcv+0x139/0x190 [ 257.379805][ C0] __sk_receive_skb+0x33a/0xbd0 [ 257.384684][ C0] ? sk_free+0x50/0x50 [ 257.388799][ C0] dccp_v4_rcv+0xeaa/0x1bf1 [ 257.393458][ C0] ip_protocol_deliver_rcu+0x60/0x8f0 [ 257.398995][ C0] ? kasan_check_read+0x11/0x20 [ 257.403945][ C0] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 257.409865][ C0] ip_local_deliver_finish+0x23b/0x390 [ 257.415350][ C0] ip_local_deliver+0x1e9/0x520 [ 257.420235][ C0] ? ip_local_deliver_finish+0x390/0x390 [ 257.425886][ C0] ? ip_rcv+0x275/0x3f0 [ 257.430062][ C0] ? ip_protocol_deliver_rcu+0x8f0/0x8f0 [ 257.435737][ C0] ? ip_rcv_finish_core.isra.0+0x828/0x1ba0 [ 257.441690][ C0] ip_rcv_finish+0x1e1/0x300 [ 257.446724][ C0] ip_rcv+0xe8/0x3f0 [ 257.450644][ C0] ? ip_local_deliver+0x520/0x520 [ 257.455713][ C0] ? ip_rcv_finish_core.isra.0+0x1ba0/0x1ba0 [ 257.461796][ C0] ? mark_held_locks+0xf0/0xf0 [ 257.466581][ C0] ? ip_local_deliver+0x520/0x520 [ 257.471730][ C0] __netif_receive_skb_one_core+0x115/0x1a0 [ 257.477670][ C0] ? __netif_receive_skb_core+0x3040/0x3040 [ 257.483574][ C0] ? lock_acquire+0x16f/0x3f0 [ 257.488353][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.494901][ C0] __netif_receive_skb+0x2c/0x1c0 [ 257.499964][ C0] process_backlog+0x206/0x750 [ 257.504755][ C0] ? net_rx_action+0x27b/0x1070 [ 257.509623][ C0] ? lockdep_hardirqs_on+0x19e/0x5d0 [ 257.514933][ C0] net_rx_action+0x4fa/0x1070 [ 257.519728][ C0] ? napi_complete_done+0x4b0/0x4b0 [ 257.525028][ C0] ? sched_clock+0x2e/0x50 [ 257.529481][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.535841][ C0] __do_softirq+0x266/0x95a [ 257.540456][ C0] ? __sched_text_start+0x8/0x8 [ 257.545665][ C0] ? takeover_tasklets+0x7b0/0x7b0 23:36:09 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) 23:36:09 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={r1, 0x200}, &(0x7f0000000240)=0x8) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:09 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:09 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") [ 257.550981][ C0] run_ksoftirqd+0x8e/0x110 [ 257.555570][ C0] smpboot_thread_fn+0x6ab/0xa10 [ 257.560570][ C0] ? sort_range+0x30/0x30 [ 257.565008][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 257.571339][ C0] ? __kthread_parkme+0xfb/0x1b0 [ 257.576297][ C0] kthread+0x357/0x430 [ 257.580380][ C0] ? sort_range+0x30/0x30 [ 257.584727][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 257.591083][ C0] ret_from_fork+0x3a/0x50 23:36:09 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r3, 0x9) r4 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r4, r4, r4, r4, r4, r4, r4, r4, r4]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r5, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) [ 257.890342][T10206] dccp_close: ABORT with 1061 bytes unread 23:36:09 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={r1, 0x200}, &(0x7f0000000240)=0x8) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:09 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 23:36:09 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:09 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:09 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:09 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:09 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0x0, 0x0) 23:36:10 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:10 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:10 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0) 23:36:10 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r3, 0x9) r4 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r4, r4, r4, r4, r4, r4, r4, r4, r4]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r5, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:10 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r3, 0x9) r4 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r4, r4, r4, r4, r4, r4, r4, r4, r4]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r5, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:10 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0x0, 0x0) 23:36:10 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:10 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:10 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:10 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 23:36:10 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:11 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:11 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:11 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:11 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") [ 259.959105][T10305] dccp_close: ABORT with 1061 bytes unread 23:36:11 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:11 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r3, 0x9) r4 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r4, r4, r4, r4, r4, r4, r4, r4, r4]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r5, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:11 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:11 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:11 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:12 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:12 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:12 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:12 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:12 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") [ 261.128027][T10368] dccp_close: ABORT with 1061 bytes unread 23:36:12 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:12 executing program 1: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:12 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) 23:36:13 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:13 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:13 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:13 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 23:36:13 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:13 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:13 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0x0, 0x0) [ 262.241406][T10420] dccp_close: ABORT with 1061 bytes unread 23:36:13 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:13 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000600108000004d37216f1bd89fd4a6c415eccfaf0abe91dd9ae601e011f224489efcb109a3ace7f6e748db1d883dffa27081d85a818a6307437c43fd370e23838edf4b824d90ce82dbc30ada71e0206578816726f91ddfce78d7b382b8f798684519ac041bf94c97c81c2aa42b6a76a40973e23fa60e169de542b0782ce484024f2cfda61bec6217bc4df7db60d1e2eee01832f03e85af7330028a4b6ef0180000000000000afc00c57b9654293df545d5707219887715ad80e80423b6d1296913ec1eeb20720a20998205af4230f477ee941fcc9d596ca4cc45e72eef4c804c4107ed31eb54c6d00c29e310bfc6a13ba4206ddf4e4120000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:13 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0) 23:36:14 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:14 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:14 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:14 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0x0, 0x0) 23:36:14 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:14 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:14 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 23:36:14 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:14 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x0, 'client0\x00', 0x0, "4e1520351b1a6a61", "8b3d83d2e50a9a9bcedf1129c0052bfe6a8d5eab4d1b0a7b690018baffdd2ddb"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4091}, 0x800) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0xffffffffffffff00}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 23:36:14 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:15 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:15 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002c00)=ANY=[], &(0x7f00000002c0)) r0 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x14100) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe1b1, @empty, 0xfffffffffffff3ed}}, 0x200, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={r2, 0x200}, &(0x7f0000000240)=0x8) connect$rose(r1, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000a80)='/dev/admmidi#\x00', 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) clock_gettime(0x0, &(0x7f0000000200)) 23:36:15 executing program 3: fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x5a, 0x1, 0x3}}}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x40000) fcntl$getown(r4, 0x9) r5 = getgid() setgroups(0x9, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, r5, r5, r5]) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xf0ff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r3, r0, 0x0, 0x10000014e) setrlimit(0x420008000000007, &(0x7f0000000000)={0x4, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x3, 0x9, 0x8, 0xed, 0x574f3dcd, 0x3, 0xb548000000000000, {0x0, @in6={{0xa, 0x4e22, 0x2800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x2, 0x4b, 0x2ed, 0x3, 0x100000001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r6, 0x8001}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$isdn_base(0x22, 0x3, 0x0) 23:36:15 executing program 0: syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8020400) pselect6(0x40, &(0x7f00000000c0)={0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0) 23:36:15 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3