0x0, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000140)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, {0x1}, 0x20, {0x2, 0x4e21, @broadcast}, 'gretap0\x00'}) ioctl$KDGETLED(r5, 0x4b31, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x20, 0x3f, 0x9, 0x100, 0x0, 0x6b2, 0x0, 0x1, 0x3f, 0x2, 0x58, 0xffff00000, 0x6, 0x3, 0x80, 0x81, 0x8, 0x101, 0x2, 0x2, 0x4, 0xfff, 0x4, 0x800, 0x5, 0x1d, 0x8000, 0x1, 0xfffffffffffffff8, 0x3f, 0x200, 0x6, 0x5, 0x3f, 0xff, 0x3, 0x0, 0xfa, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x4000, 0x8, 0x81, 0x9, 0x8, 0xc2, 0x1}, r4, 0xf, r5, 0x2) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:40:13 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:13 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) [ 909.434287][ C1] net_ratelimit: 16 callbacks suppressed [ 909.434296][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 909.445830][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 909.451669][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 909.457536][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:13 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x8d25da780149f44a, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x0, 0x0, "b1"}, 0x9) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x5, 0x3}, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0xc2) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) socket$inet(0x2, 0x0, 0x7) 14:40:14 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x7000000) 14:40:14 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:14 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x61388a6}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000080)=0xfffffffffffffd7c) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x7aaaa382758f43e) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000100)=0xfa9) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80240811}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100002100100025bd7000fddbdf25e0000001000000000000000000000000000000000000000000000000000000004e24001103ee9c5c0db54a4a0708752a004e2200060200e267429be38805c6456cf2a5103f7ea1ea539fda2cc41f4e309d2c288c1783c6410eb53d9dca739f6dbda96029dfdc19085a3c2c4dd819bed3a6755a912d1c9fc2d6485cde1ba364ed7b57ef5a9a2d11ade720503e7c45cc654668a7685c4c17f1eb8a2ee5b94adf959c7c4c7c4634e926648fe0b1c4204cbc025380c16f1de45f56495c0d00"/220, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="b16b6e000300000008001800ec00000010000a0026bd700026bd7000000000000800180001f8ffff14000e00fe8800000000000000000000000000010c000f000400000000000000740008006f0008000200670051d2b7743ff331d698fe839d653cbdd0e534823a2350445b1295790d4627c0a7e25f34bc506e09090608317f5696d0fb239654d0097885dfb61ca942f22215890b538e87f3f7525532a8934ebd6aea25bc71caa3f53d69493065d7927a943937b35f7778bc8578d1e1d7ec0408937a000800040013540000"], 0x10c}, 0x1, 0x0, 0x0, 0x100}, 0x8000) 14:40:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x2, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 909.834307][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 909.840168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 909.846102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 909.851896][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:14 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x8000000) [ 910.634303][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 910.634362][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:40:16 executing program 5: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000080)=0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x915dea2128102538) write(r1, &(0x7f00000000c0)='\'', 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:40:16 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x10, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x1}) 14:40:16 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x17) 14:40:16 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xa000000) 14:40:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() tkill(r2, 0x1000000000015) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000005a00000327bd7000fcdbdf250001cb3b2e", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x4000080}, 0xc) 14:40:17 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x40000000) 14:40:17 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x2272, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:17 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:17 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x200001d8) 14:40:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x4c01, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:17 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:17 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x48000000) 14:40:17 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) r2 = dup2(r1, r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x1400, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x344082, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000001c0)) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000000)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0x9) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) read$rfkill(r2, &(0x7f0000000200), 0x8) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x42400, 0x0) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000100)="835fe540b276a97bfab1089a5dba6bf45f0f61cdf695d835b72f3da9809982f68982ded679a4ed379169b37d930813a2d0c113b9c23903d6574ca5a84c30ae40590d8c6fd2264567255a5e1bf17ab13301f3f117f4b35768a3f48683503bea225b406f586439e7fb632d0f819764e62c") 14:40:17 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:17 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) [ 914.794321][ C1] net_ratelimit: 22 callbacks suppressed [ 914.794330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 914.794335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 914.794415][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 914.800064][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0xfffffffffffffffd, 0x4004889}, 0x75) 14:40:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x5421, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:20 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x4c000000) 14:40:20 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000140)) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000001c0), 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30fecace29b89d470cda02a993803527b6807b582acb7207cd412edaf401bb36aff5b3a541d957f22f6cf42fa580296f31c918a34d6bd1060bfebcb24fcd867b0ecd0bd931342c3362a3186a736336a9c0f0f50875c57a39391d7887eb7b6fe0b97448289024b8c464b6497068b93f402b0b3abbb8203b955e09371dcae494a79c70c65d6e6093994ae59584ce4c2f1fe6f7aa51679d5911f74ab8ca122ef125e3b0066624a0a257"], 0xbb) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xe22a) perf_event_open(&(0x7f000001d000)={0xadb275158c944dc7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x38da, 0x0, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dspn(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000100)=0x7fff, &(0x7f0000000180)=0x2) setsockopt$sock_void(r5, 0x1, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:40:20 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:20 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) [ 915.674285][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 915.680211][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 915.686193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 915.692109][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0xffffffffffffffff}, 0x1c) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', r5}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) [ 915.731175][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x5450, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:20 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x340]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:20 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x68000000) 14:40:20 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x9, 0x400000005) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x39, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x4, r1, 0x31, r4}, 0x10) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 14:40:20 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x5451, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:20 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x1000000000000, 0x9c442187}, 0xc) [ 916.074344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 916.080269][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:20 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:20 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x6c000000) 14:40:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x0, 0x0) unshare(0x40000000) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) 14:40:20 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) poll(&(0x7f0000000040)=[{r1, 0x93629f86055ca277}, {0xffffffffffffffff, 0x6153}, {r0, 0x100}], 0x3, 0x80000001) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000180)) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c000000729cb902e21ae8ecd76ddf4f664182b30fabb314fb93f448bbae5bdd10cc53643b767fd1e9f5908e9b5e13ee9ba7d734b5678486fc1cfc80cd424a171f361b268049aa0861de7c567f992f74218a04d1180b2535e89cc5bd71d7d1b1f3f0a45bb57efc10", @ANYRES16=r2, @ANYBLOB="010000000000000000000300000058000100100001007564703a73797a300000000044000400200001000a000000000000000400000000000000000000000000000000000000200002000a00000000000000fe8800"/102], 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0xdc131dae31ec8f91) 14:40:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x5452, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:20 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:20 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x74000000) 14:40:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x5460, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0x244) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 14:40:21 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x101000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'rose0\x00'}}}, ["", "", "", "", ""]}, 0x2c}}, 0x40001e2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x1df) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x101, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:21 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x7a000000) 14:40:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x6364, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 916.963913][T11017] IPVS: ftp: loaded support on port[0] = 21 [ 917.232463][T11256] IPVS: ftp: loaded support on port[0] = 21 14:40:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:21 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:21 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000011000000000000097200000000004b3a3c3d1f7156346fe76529f6178895fcf6e047fc95738dd10896f898e6f2ce70cff19c5a1349e45ba2be8af1f46128084df3ee46e40dc472eb546d43b995a579767f1cd75035378245bab68fff296258e3af896249ff079d903abbf02d59de3473bab35268a0cdc612706b3c3b0b00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x84008244}, 0xfffffffffffffdce) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3, 0x0, 0x0, 0x1, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000280)={0x7f, 0x6, 0x5}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x121, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48851) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xf9a1b392bb4579dc}, 0x80) 14:40:21 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x10000000000000) 14:40:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:21 executing program 4: ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'team_slave_1\x00', 0x3}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x18) 14:40:21 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xfffffffffffffe6c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl(r1, 0x100000000, &(0x7f0000000040)="9c6cc79b24eb0b83391f94") 14:40:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x8933, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:21 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x100000000000000) 14:40:21 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, [], [{0x0, 0x5, 0x20, 0x9, 0x4, 0x8000}, {0xff, 0x6, 0x0, 0x1ff, 0x40, 0x822e}], [[], [], [], []]}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xae01, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:22 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x200000000000000) 14:40:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:22 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) syz_extract_tcp_res(&(0x7f0000000040), 0xa0bf, 0x51ff) 14:40:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xae41, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:22 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x2) close(r7) io_setup(0x40000000085, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x3c0}]) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xffffffff00000000, 0xffffffffffffffff, &(0x7f0000000080)="780f1db921e9908b72c86ed54ccd70a8ccd20a37448171306bbdf2ccc9e7d76c51ade883e5", 0x25, 0x9, 0x0, 0x0, r6}]) 14:40:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4500]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:22 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x300000000000000) 14:40:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xae80, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:22 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x40, 0x0) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:audit_spool_t:s0\x00', 0x23, 0x1) 14:40:22 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x400000000000000) 14:40:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x400454ca, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7500]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x400454de, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4100080}, 0xc) 14:40:23 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x500000000000000) 14:40:23 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200c00, 0x4) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f00000000c0)=0x206) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa23d2e11607181b1, 0x40010, r0, 0x0) 14:40:23 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x40049409, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x4008ae89, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:23 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:23 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x600000000000000) 14:40:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:23 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x500, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r4, 0x0, 0x0, "b1"}, 0x9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r4, 0x1fe0000000000, 0xfffffffffffffff7}, 0x8) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r5 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="91", 0x1, 0x8000, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffffffffffc, @mcast2, 0x1}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 14:40:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x4008ae90, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:23 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:23 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x700000000000000) 14:40:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x4010aeac, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:24 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:24 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x335) 14:40:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0xffffffffffffffff}, 0xffffffffffffffbb) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40502, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x9c3) 14:40:24 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x800000000000000) 14:40:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x4020940d, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 919.834297][ C1] net_ratelimit: 16 callbacks suppressed [ 919.834306][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 919.845904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 919.851736][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 919.857649][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101000, 0x0) 14:40:24 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x4090ae82, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:24 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xa00000000000000) 14:40:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:24 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x60, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x422000, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000540)='/dev/adsp#\x00', 0xc5, 0x100) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000580)=0x18) [ 920.234310][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 920.240165][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 920.246059][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 920.251864][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xd3) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='bridge_slave_1\x00') 14:40:24 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:24 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x4000000000000000) 14:40:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x4138ae84, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:25 executing program 4: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x100000001, 0x200200) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x119ab6634dbc3f42, 0xfffffffffffffee6) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x80044940, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:25 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x4800000000000000) 14:40:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r2, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x800454d2, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:25 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x4c00000000000000) 14:40:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x7a, 0x35}) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200080, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r3) ioctl$KDGETLED(r1, 0x4b31, 0x0) accept$alg(r1, 0x0, 0x0) [ 921.034280][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 921.034285][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:40:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x80086301, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r2, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:25 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x30a510, 0xffffffffffffff64) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0xa8) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x183602, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) r5 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r5, 0x4b31, 0x0) r6 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r6, 0x4b31, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000340)=""/4096) r7 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7cbb) ioctl$KDGETLED(r7, 0x4b31, 0x0) r8 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r8, &(0x7f0000000040)="91", 0xffffffb8, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) ioctl$TIOCSSERIAL(r5, 0x541f, &(0x7f00000002c0)={0x4, 0x3, 0x4, 0x1f, 0x4, 0x8, 0x0, 0x9, 0x8001, 0x7, 0x0, 0x10000, 0x2, 0x2, &(0x7f0000000240)=""/67, 0x9, 0x8, 0xa5f}) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x7, 0xfffffffeffffffff, 0x7f}) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x1, 0x1e, 0x800, 0x1, "24d523e13445cc7efd38ef631975c59eaa67bb6d0f9e477e348f32c795393a3b"}) r9 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r9, 0x4b31, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000100)='\x00') 14:40:25 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x6800000000000000) 14:40:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:25 executing program 3: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000000)="92b7046c9907e58bac89f9e6c5c108cf51ae305ab022c19134c44bbdaf4d0873995b565e9a48edf2704a5709bde9f0e01b3eaae22389aead7764121071f3db1a0d4c07f928dd5d1bd61b", 0x4a) 14:40:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0x8138ae83, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:25 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x10d) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r2, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:25 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x6c00000000000000) 14:40:25 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x10951, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = semget$private(0x0, 0x4, 0x20) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000040)=""/17) 14:40:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0045878, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:26 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x7400000000000000) 14:40:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:26 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7ff, 0x40000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r4, 0x0, 0x0, "b1"}, 0x9) socket(0x1e, 0x80000, 0x200) r5 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r5, 0x4b31, 0x0) pidfd_send_signal(r5, 0x1b, &(0x7f0000000100)={0x2e, 0x100000001, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r4, 0xfb8}, &(0x7f00000000c0)=0x8) 14:40:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd6a, &(0x7f0000000080)={0x0, 0xfffffffffffffda0}}, 0x0) r1 = socket(0x4000000000010, 0x2, 0x3) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000001800190000003fffffffda0602007a00fde8ff01084800040d0005000000000000000000ff", 0x29}], 0x1) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x1) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000140)={0x2d}) sendmmsg$alg(r1, &(0x7f0000000140), 0x42, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0xfffffffffffffffd, 0x4000080}, 0xffffffc7) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x20c1, 0x0) 14:40:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0045878, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:26 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x7a00000000000000) 14:40:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc008ae05, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:26 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x100010, 0x4) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x9, 0x5}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x840) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x88000000000805, 0x5) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) flock(r2, 0x11) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:26 executing program 0: r0 = inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r2, 0xd}, 0x10) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x6, 0x200000) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000300)=0x2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1, 0x711800) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000140)={{0x9, 0x4d, 0x7, 0xfffffffffffffffb, 0x6, 0x9}, 0x2}) r5 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r7 = socket(0x3, 0x1, 0x5) r8 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r9, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) sendmsg$can_raw(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r9}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=@canfd={{0x4, 0x0, 0x4, 0xfff}, 0x38, 0x1, 0x0, 0x0, "3d44548cef2677f776b592356522387b2b16459f1aba1d75bb83182086f550cf06df08f25b1b5e657d23b0ba75b5ad185d721a987f14c45816a28cc066606982"}, 0x48}, 0x1, 0x0, 0x0, 0x4008851}, 0x24040080) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) write$P9_RLERROR(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000007020000003ee2a98292aa0903da8ffe557b46f5807deb116d94214183933a5ac30f0e31867ed38104efc2706ded96e59e5ac5261ce648a6327a028f58d8315349a0e462be67ee74bc5b72f4a704ad0416df167b52ed63b1fb07dfa984"], 0x9) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, 0x80, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='caif0\x00', 0x4, 0x81, 0x5}) ioprio_get$pid(0x1, r6) 14:40:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184907, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r3, 0x13, 0xa1}, &(0x7f0000000440)=ANY=[@ANYBLOB='enc=raw hash=nhpoly1305-nenn\x00'/77], &(0x7f0000000540)="ecfa5114431691b72f6054bf1416dfa8c8d5d6", &(0x7f0000000580)=""/161) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:27 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:27 executing program 4: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fremovexattr(r0, &(0x7f0000000040)=@known='user.sy\x82\x00') r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x620000) fstat(r1, &(0x7f0000000080)) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184910, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:27 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000003c0)='sfb\x00', 0xfffffffffffffffd) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:27 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000240)=""/155, 0x9b}], 0x2, &(0x7f0000000300)=""/191, 0xbf}, 0x9a6e5a6850d41a3f) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x1080, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 14:40:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) ioctl$sock_ifreq(r1, 0x8949, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_ivalue=0x9}) 14:40:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0189436, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:27 executing program 0: r0 = inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r2 = shmget(0x2, 0xa000, 0x40, &(0x7f0000ff4000/0xa000)=nil) r3 = socket$tipc(0x1e, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r3) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800) r5 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r5, 0x4b31, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20, 0x0, 0x0, r5}) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/220) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x9}], 0x1, 0x1000000000000000) 14:40:27 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x100000001, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) 14:40:27 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 14:40:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc018ae85, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:27 executing program 0: inotify_init() arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x2, 0xfc2fa18b94b8cba, 0x5, 0x1}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:27 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc020660b, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:40:28 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = accept4$inet(r1, 0x0, &(0x7f0000000080), 0x400) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'veth0\x00', 0xc00}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x9, 0x8001, 0x6, 0x4, 0x20}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @remote}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x7f, 0x4) 14:40:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540)=0x0, &(0x7f00000006c0)) keyctl$chown(0x4, r1, r2, r3) r4 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r4, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) getresgid(&(0x7f0000000400), &(0x7f0000000540)=0x0, &(0x7f00000006c0)) keyctl$chown(0x4, r6, 0x0, r7) r8 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540)=0x0, &(0x7f00000006c0)) keyctl$chown(0x4, r8, r9, r10) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r13, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fstat(r13, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f00000002c0)=[r3, r5, r7, r10, r11, r12, r14]) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:28 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) setns(r1, 0x4000000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000040)=""/242, 0x23a000, 0x1000, 0x7}, 0x18) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0605345, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 923.981397][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:40:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:28 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 14:40:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:28 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xfffffffffffffff8}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x64}) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x20000, 0xaa) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r3 = socket(0x2, 0x800, 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @empty={[0x4]}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xa4, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5f6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0xa4}}, 0x4000) 14:40:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x2, 0x0}) 14:40:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 924.456293][T13485] ion_ioctl: ioctl validate failed [ 924.475045][T13481] Started in network mode [ 924.487610][T13481] Own node identity 04, cluster identity 4711 [ 924.514514][T13481] Enabling of bearer rejected, failed to enable media 14:40:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:29 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x208400, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x4002, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x40000, 0x0, [0x200, 0x8, 0x0, 0x8, 0x0, 0x4, 0x4, 0x9]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x3, 0x0}) 14:40:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x4, 0x0}) 14:40:29 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x1371, 0x9, 0x9e3, 0x1ff, [], [], [], 0x5, 0x14f, 0x36, 0x7, "dfa8dfaa1ae306489ab3376868119c81"}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) r3 = syz_open_pts(r2, 0x40000) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000180)=0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:29 executing program 0: r0 = inotify_init() r1 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7, 0x80) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) openat$cgroup_subtree(r2, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="2321202e2f66696c6530206c6f20657468315d2e206664696e666f2f330020205d5b40206664696e666f2f33000a5878892227739c0da1ef07b636edbd7f3c6f0ee8832729a596ef64883d1cd9c7685ec23f10268518e914e2967825969006681b3d596e222ccbeceac8774067cb75b2ea6a974d3fb26fdac3cefbbc1d0ae0e8b1cd1242a2f6be6b9fbcd45ad409f5aec3dcf2ca538cdfe2410a4613e38263510c2c8dca397a931033eef46304ae0000000000000000"], 0xb6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x9, 0x0, {0x0, 0x3, 0x9, 0x2, 0x6}}) arch_prctl$ARCH_GET_CPUID(0x1011) 14:40:29 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @empty={[0x4]}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xf031ec7489a1722e}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xe0, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc0, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ea0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x400c000}, 0x200808b0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) linkat(r4, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000000c0)="62f873f39f88116b5ff8b66d4f065a9c02fdbd52b4a2338dd87f4b6cc2810c80f2f62bd02a93b12220aeb0ab1c56e5b4f3c27df9eb7b5fdf5d49c286be3739563db6afb771c400549918c136a54fa085794eb6438e7e4a4c990849470a0a3574bf169773151ee272c5a1344e01173cb3060b6a69d6abb85b0bb06229258367ebc4eba7cd957e5cb09861cef042eb6931b8f62ca132dd11ced328b29a99900371564dd2", 0xa3) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) 14:40:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x5, 0x0}) 14:40:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 925.194299][ C0] net_ratelimit: 22 callbacks suppressed [ 925.194307][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 925.194339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 925.200014][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 925.205753][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:29 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1039f88, 0x4) 14:40:29 executing program 3: r0 = semget$private(0x0, 0x0, 0x1a2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000280)=""/245) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) [ 925.345279][T13742] Enabling of bearer rejected, failed to enable media 14:40:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0xba5}, 'syz0\x00', 0x4}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x92000, 0x0) write$P9_RREAD(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf2) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") r6 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r6, 0x4b31, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000580)={{0xffffffffffffffff, 0x2, 0x4, 0x3, 0x3}, 0x6, 0x10000}) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x111102, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000340)={r7, 0xfff}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000600)=ANY=[@ANYRES32=r7, @ANYBLOB="0040a08aa2effa0000b1"], 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r7, 0x80}, &(0x7f0000000080)=0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000500)={'icmp\x00'}, &(0x7f0000000540)=0x1e) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x4e22, 0xfffffffffffffff9, @empty, 0x6}}, 0x2400, 0x190, 0x6, 0x6e}, &(0x7f0000000180)=0x98) r10 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400100, 0x10) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r1, 0x100000000) 14:40:30 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$midi(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="b4bc7a7a934d39268e330cae42cf7c10"}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3dcf}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x240000000000000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7e80000000000000}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1cb}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbb}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x19}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x82}, 0x4004000) ioctl$KDGETLED(r1, 0x4b31, 0x0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x4, 0x1, 0xfffffffffffff800, 0x3}, 0x3e, [0x5, 0x7900, 0x6, 0x10000, 0x8, 0x0, 0x4, 0x3, 0x2, 0x3ff, 0x40, 0x5b4f, 0x6, 0x5, 0x401, 0xaf, 0x8, 0x1, 0x0, 0x5, 0x7, 0xfffffffffffffffa, 0x6, 0x9, 0x200, 0xdb, 0x69b, 0xfffffffffffffffa, 0x7, 0x6b8b, 0x5, 0x2, 0x7fff, 0x2, 0x5, 0x1f, 0x80000001, 0x6, 0x20, 0xfff, 0x5, 0x8, 0xfffffffffffffff9, 0x3, 0x7, 0x5b66, 0x5, 0x2, 0xfff, 0x8, 0x4, 0x1f, 0x5, 0x6, 0x68d9fc01, 0x2, 0x8, 0x6, 0x0, 0x5, 0x2, 0x1cb8, 0x9, 0xa53d], [0x3f19, 0x81, 0x5, 0x1, 0x2, 0x2, 0x65a8, 0xfb, 0xff, 0x8, 0x18a, 0xc72, 0x6, 0x2, 0x800, 0x1ff, 0xc093, 0x6, 0x10000, 0x8001, 0x5bb, 0x9, 0xffff, 0xec5, 0x5d83, 0x80000001, 0x2, 0x2, 0x100000000, 0x20d1, 0x100000001, 0x200, 0xdc1b, 0x7, 0x20, 0x669ef7a7, 0x20, 0x2, 0x6, 0x6, 0x6, 0x7baf56b8, 0x8, 0x4, 0x6, 0x100000000, 0x56a0, 0x10001, 0x401, 0x3, 0x1, 0x40, 0x0, 0x10001, 0x0, 0x3ff, 0x101, 0x4, 0x10001, 0x0, 0x9, 0x2, 0x9, 0x8], [0x2, 0x79c74ea2, 0x1, 0xffff, 0x0, 0x6, 0x5, 0x10000, 0x4, 0x6, 0x3, 0x8001, 0xe34b, 0x40, 0x9, 0x20, 0xffffffffffffffc0, 0x2, 0x7fff, 0x3, 0x3, 0x3, 0x4, 0x1, 0xfff, 0x7237, 0x85d, 0x4a, 0x800, 0xa000000000000000, 0x230, 0x8, 0xfffffffffffffff8, 0x0, 0x7, 0x2ba, 0x2, 0xc07, 0x2000000000000, 0xff, 0x7fff, 0x5, 0x7, 0x3f, 0x45d4, 0xa, 0x400, 0xffff, 0x3f5c8000, 0xffffffffffff0001, 0x2, 0xa07, 0xffff, 0xffffffffffffff81, 0x3, 0x1000, 0x1, 0x1, 0x5, 0xf1d6, 0x80, 0x3, 0x3, 0x4], [0x3, 0xa471, 0x5, 0x26b3, 0x5, 0x40, 0x200, 0x3, 0x3852, 0x8, 0x4911, 0x9, 0x0, 0x10000, 0x2, 0x3, 0x5, 0x38, 0x1ff, 0x7, 0x100, 0xa4d1, 0xc1, 0x6, 0xffff, 0x1, 0x5, 0x1, 0x496e, 0x1, 0xff, 0x7ff, 0x7, 0x5, 0x100, 0x5, 0x20004, 0x7, 0x4, 0x3f, 0x8001, 0x8c, 0x8001, 0x4a3, 0x7, 0x8, 0xfffffffffffffff8, 0x8, 0x2, 0x1, 0xfffffffffffff64e, 0x10001, 0x2, 0x0, 0x5, 0xdf9, 0x1, 0x5264, 0x5, 0x6, 0x767, 0x8000, 0x82, 0x7]}, 0x45c) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) [ 925.583601][T13759] input: syz0 as /devices/virtual/input/input23 14:40:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x6, 0x0}) 14:40:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 925.770990][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x7, 0x0}) 14:40:30 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000003540)=0x10) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x800) write$cgroup_int(r1, &(0x7f00000000c0)=0x10001, 0x12) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000080)=0xff1e) [ 925.960773][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x8, 0x0}) [ 926.074281][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 926.080128][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 926.086003][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 926.091774][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x4000080}, 0x5) 14:40:30 executing program 0: epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) epoll_create1(0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) inotify_init() r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000240)={0x3ff, 0x0, [], {0x0, @bt={0x54, 0x9, 0xea835223c01afee4, 0x3, 0x4, 0x1000, 0x7f, 0x2, 0x101, 0x4, 0xd1, 0x3, 0x81, 0x9, 0x10, 0x2}}}) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x300, 0x0}) 14:40:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) 14:40:30 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) [ 926.474315][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 926.480199][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x500, 0x0}) 14:40:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:31 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) getrusage(0x4fe93fa44b1856ef, &(0x7f00000000c0)) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x20, 0x1]) 14:40:31 executing program 4: setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x33, @multicast1, 0x4e20, 0x4, 'lc\x00', 0x68, 0x100000001, 0x32}, 0x2c) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:31 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000002500)={0x0, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x4c80, 0x0) accept$packet(r3, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002580)=0x14) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1, &(0x7f0000000180)}, 0x100}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000380)=""/228, 0xe4}], 0x2}}, {{&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f00000006c0)=""/7, 0x7}, {&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/113, 0x71}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001940)=""/186, 0xba}, 0x2}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/16, 0x10}, {&(0x7f0000001a40)=""/127, 0x7f}], 0x2, &(0x7f0000001b00)=""/21, 0x15}, 0x7ff}, {{&(0x7f0000001b40)=@alg, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001bc0)=""/253, 0xfd}, {&(0x7f0000001cc0)=""/172, 0xac}, {&(0x7f0000001d80)=""/210, 0xd2}, {&(0x7f0000001e80)=""/27, 0x1b}, {&(0x7f0000001ec0)=""/136, 0x88}], 0x5, &(0x7f0000002000)=""/6, 0x6}, 0x7}, {{&(0x7f0000002040)=@l2, 0x80, &(0x7f0000002340)=[{&(0x7f00000020c0)=""/220, 0xdc}, {&(0x7f00000021c0)=""/42, 0x2a}, {&(0x7f0000002200)=""/192, 0xc0}, {&(0x7f00000022c0)=""/75, 0x4b}], 0x4}, 0x401}], 0x6, 0x10000, &(0x7f0000002540)={r1, r2+30000000}) 14:40:31 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x600, 0x0}) 14:40:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x201700, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3, 0x0, 0x0, 0x1, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000280)={0x7f, 0x6, 0x5}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x121, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48851) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x8468e4c69862ab3b, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x81}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81c741832609e405) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1}) 14:40:31 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@ipv4={[], [], @rand_addr=0xe4c6}}, 0x14) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:40:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x700, 0x0}) 14:40:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x4000080}, 0xffffffffffffff0f) 14:40:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:31 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @mcast1, 0x1}, 0x1c) 14:40:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x3f00, 0x0}) 14:40:32 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x105000, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r2, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltfilter={0x44, 0x2d, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, r2, {0x0, 0x6}, {0xffe2, 0x7}, {0x5, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffffffffff7}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0xfffffffffffffd60, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000820) mq_open(&(0x7f0000000240)='/dev/sequencer\x00', 0x40, 0x14, &(0x7f0000000280)={0xd8, 0xffffffff, 0xb32d, 0x2, 0xc7c1, 0x5, 0x9, 0x7ff}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:32 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:32 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x4000, 0x0}) 14:40:32 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:32 executing program 3: clock_nanosleep(0x4, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0xff00, 0x0}) 14:40:32 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)='bridge_slave_0\x00') r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x9d216efcee824dd9) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x8, 0x401, 0x2, 0x1, 0xffffffffffffffe1, 0x81, 0x0, 0x4}}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0xe4, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x20, @dev={0xfe, 0x80, [], 0x14}, 0x1}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x3}, @in6={0xa, 0x4e24, 0x8001, @mcast2, 0x178}, @in={0x2, 0x4e24, @rand_addr=0x81}, @in6={0xa, 0x4e20, 0xfffffffffffffff7, @rand_addr="51826262662781eac622eaae11e33d7a", 0x101}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x8, @empty, 0xab}, @in6={0xa, 0x4e24, 0x20, @mcast2, 0x20}, @in6={0xa, 0x4e21, 0xffffffff, @loopback, 0x2f8}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x1}, &(0x7f0000000300)=0x8) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4001180}, 0xc) 14:40:32 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x1000000, 0x0}) 14:40:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:32 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x1006d84, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2c8000ce}, 0xc) 14:40:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4500000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x2000000, 0x0}) 14:40:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x100000000, 0x4000080}, 0xc) 14:40:33 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x0) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x80000, 0x0) write$P9_RREAD(r2, &(0x7f0000000080)={0x63, 0x75, 0x2, {0x58, "99ba1bc9ea3a2c66a0e0e78a2d7be68cde5a68d367c8c31606a70b8bb46e4a50c799f3299894b9bf21de5a8d1115fe04bb3f5218746b4877d020449a4b3fcf4989cd3b2d31635dbee11f8f9466bf54f726d9b1c908edb927"}}, 0x63) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@generic={0x0, 0x4, 0x8}) setsockopt$inet6_buf(r2, 0x29, 0x44, &(0x7f0000000240)="0732b0077cb3872c77695a0295b17d9361eda1ddfd3387c66b896c93a6db0fa97436e474ae47f0ae52b98ab71ea191dc25ca67ea91de98238236f0a7fa925db65abe5a1a08d5dd3c8c04acad4e", 0x4d) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x17) 14:40:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x3000000, 0x0}) 14:40:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7500000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:33 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x8, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000011006ba700"/20, @ANYRES32=0x0, @ANYBLOB="0000001b00000000a89e97aa6c5f1530"], 0x28}}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xffffff00) 14:40:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x4000000, 0x0}) 14:40:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 929.313886][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:33 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r4, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x16, r4, 0x1, 0x7, 0x6, @link_local}, 0x14) [ 929.403762][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:33 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6a7}, &(0x7f0000000080)=0x8) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r1, 0x1000}, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x401}, &(0x7f0000000140)=0x8) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x114) connect$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, {0x694, 0x3, 0xff, 0xbd, 0xfffffffffffffffe, 0x2}, 0x3}, 0xa) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0xff, 0x5, 0x801a, 0xfffffffffffffffa, 0xffffffff, 0x3b, 0x2, 0x6, r3}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x5000000, 0x0}) 14:40:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x6000000, 0x0}) 14:40:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:34 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x100408, 0x4) r2 = syz_open_dev$midi(0x0, 0x277ffd9f, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000100), &(0x7f00000000c0)=0xfffffffffffffe74) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/194, 0xc2}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/184, 0xb8}], 0x3) 14:40:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x7000000, 0x0}) 14:40:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 930.234307][ C1] net_ratelimit: 16 callbacks suppressed [ 930.234316][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 930.245864][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 930.251748][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 930.257581][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x8000000, 0x0}) 14:40:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = socket$inet_sctp(0x2, 0x0, 0x84) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1) 14:40:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:35 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x1000, 0x337) r1 = gettid() r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100), 0x4) tkill(r1, 0x1000000000015) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) getpgid(r1) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffec8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000280)="18314434e3910cefac17ca171074aa007d56f00d6d42a0a1acfda65c11ff278648ca6ee05d448428edeb1f3e8c1bc96baad7906d93f33d08bd2831bec8c1a67d1d6fc15a77d7d7ecde58a217ebc1c2ba11c1d4604d9552e243f89dd49e644d127bde651453e908db74bf898ec44c2277c3caee1f5a5bb1d0f5eb0aa5f19ae15942acc41accf789d92858fb6fa9b05f0ee778e789d5faacf33617a71c0fac0211afae74ad6bf35832", 0xa8) 14:40:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x3f000000, 0x0}) [ 930.634363][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 930.640241][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 930.646149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 930.652206][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 930.671146][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:40:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:35 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:35 executing program 3: set_thread_area(&(0x7f0000000040)={0x1, 0x411e309af14f8a74, 0x4000, 0x1, 0x7, 0x80, 0x7, 0x7fffffff, 0x1, 0x3f}) clock_getres(0x3, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x4, 0x3, [], &(0x7f00000000c0)=0x100000001}) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:35 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x9, 0x0, 0x869, &(0x7f00000000c0)) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140)=0x8400, 0x4) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:35 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x40000000, 0x0}) 14:40:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 931.086964][T15394] QAT: Invalid ioctl 14:40:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0xfdfdffff, 0x0}) 14:40:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x88040, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000000c0)=""/191) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x2}) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:35 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 931.343961][T15511] Unknown ioctl -2143271674 14:40:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 931.434298][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 931.434333][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0xff000000, 0x0}) 14:40:35 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x3, 0x103, 0x4, {0x80000001, 0x100000000, 0x70b9, 0x8}}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0xffffffffffffffac) 14:40:36 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x3) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x8c000) sendto$inet6(r2, &(0x7f00000002c0)="91", 0x0, 0x40, &(0x7f0000000240)={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) write$binfmt_aout(r1, &(0x7f0000000040)={{0x10b, 0x80000001, 0x80000000, 0x24c, 0x308, 0x65, 0x85, 0xb082}, "793cb913bb6a3f88a75a9bbafc5f79013a4ff8baa5802fecd9dc100fe31b50a8bc0a79fe5994bd0beef3df95a2345acb29b752c7d4d80c07ac8291ac5e8c6d241275e5271c4ccb2d38e331109a286e0dfc1bb8b6fb7238e2bdb8c47ba399a9e6ac47794f03934a8ba90084f089e0ee75d46b9fc21b6bcd924289ac173844a77935381bcaac97c615ca22fa271edabcc90d267a6ec1cef77a6e3e072537321cddd602ccfb24afdf4a2c20b561f123b4bb1085aa4794dde69ce9f61a06802376ebb7777c", [[]]}, 0x1e3) 14:40:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0xfffffdfd, 0x0}) 14:40:36 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x100000000000000, 0x0}) 14:40:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x81, 0x400800) fstat(r0, &(0x7f0000000080)) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:36 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x200000000000000, 0x0}) 14:40:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = geteuid() r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540)=0x0, &(0x7f00000006c0)) keyctl$chown(0x4, r2, r3, r4) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r6 = syz_open_dev$midi(0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000440)='/dev/input/event#\x00') ioctl$KDGETLED(r6, 0x4b31, 0x0) ioctl$CAPI_GET_FLAGS(r6, 0x80044323, &(0x7f0000000580)) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000740)) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540)=0x0, &(0x7f00000006c0)) keyctl$chown(0x4, r7, r8, r9) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() tkill(r11, 0x1000000000015) sched_setparam(r11, &(0x7f00000003c0)) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="a50168a2010000000000000002000600", @ANYRES32=r1, @ANYBLOB="040004000000000008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000050000000000"], 0x4c, 0x1) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x200) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:36 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0xfffffffffffffed3) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000040)=0x4) 14:40:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x300000000000000, 0x0}) 14:40:36 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:36 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000200)=0x1) ioctl$KDDISABIO(r2, 0x4b37) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x10, 0x4, 0xfe3}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=0x6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=""/127, 0x7f, r3}}, 0x10) 14:40:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x400000000000000, 0x0}) 14:40:37 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:37 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x20, 0xdc2b86d37d434d0f) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:37 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00') syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x800, 0x90040) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x2, 0x200001) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000280)) 14:40:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x500000000000000, 0x0}) 14:40:39 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:39 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x40) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0xfffffffffffffff9) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000080)={0x6, r4}) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fadvise64(r2, 0x5c, 0x40, 0x3) 14:40:39 executing program 0: inotify_init() r0 = syz_open_dev$midi(0x0, 0x0, 0x40000) ioctl$KDGETLED(r0, 0x4b31, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r2, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\v\x00\x00\xfe\xff\xff\xff\x00\x00\x00\x00\x05\xbf\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) write$smack_current(r0, &(0x7f0000000080)=',&\x00', 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x0, 0x0) 14:40:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$midi(0x0, 0x8b, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x40, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x600000000000000, 0x0}) 14:40:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x700000000000000, 0x0}) 14:40:39 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') listen(r0, 0x3) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:39 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x340]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @mcast2, 0xfffffffffffffffa}, 0x1c) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) [ 935.594306][ C1] net_ratelimit: 20 callbacks suppressed [ 935.594315][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 935.594345][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 935.600035][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 935.605784][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:40:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x800000000000000, 0x0}) 14:40:40 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0xfffffffffffffdeb) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x9, 0x40800) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x591440, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000240)={r3, 0x3}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={r3, 0x602e0a67856af0b5}) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000280)=0xf3f) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:40 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc) 14:40:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x3f00000000000000, 0x0}) 14:40:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:40 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000100)={r0, 0x1f}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r5, 0x0, 0x0, "b1"}, 0x9) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @local}, 0x2}}}, 0x84) r6 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r6, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:40 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000000980, 0x60001) getsockopt$inet_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000080)=""/63, &(0x7f00000000c0)=0x3f) syz_open_pts(r0, 0x80900) inotify_init() syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2634, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340), 0x0, 0x0) 14:40:40 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x4, 0x1, 0x80000000, [], &(0x7f0000000080)={0x7bb2fa485b225fdd, 0x3, [], @value64=0x1b5}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @remote}, {0x306, @local}, 0x5, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'bcsh0\x00'}) 14:40:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x4000000000000000, 0x0}) 14:40:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:40 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x5, 0xd5b, 0x8001, 0x0, 0xc2, 0x3ff}, 0x9}, 0xa) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x4000) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:40 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:40 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1000000000000070, 0x3d) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1d, 0x4, @thr={&(0x7f0000000040)="b961fcd45d429ea70cc66f69018a802fa91932b98eda38592d66b14b0401e26f2dfc834233a1ac43f0fca2e1e194d62eb6547b979ce792b9166a18d1184de213f4bd466c5d9d5128d465270c04ee8487ad0747f76e1668ad66421856fa02ea6349cb8c06bee9a7c80f863de36e994c429485a3f402d78aabffa3ccff0b1e660128efe2d93caa570a21cfc4b282f1fe65e184fcf9b2408af1a47d5f9e684259f8583bbb17299da3fa44e3d1810738478a126d16d98db0552019eb449dff97e95424009782093ad4f91dc6b116389da9b56aabefbf9d8371d9089d085540fafec1b6", &(0x7f00000004c0)="5ee7d8769f35d2ec955ed178876edbe0460223df13ebb4a7192c0732a605bf1700e27478b2c1a1d72b26a7cca033ed3f15978f5db027ffaa75e86860d811bd73d89e65c963ab2eeb87c324f453607eb5392dde29346412a45ff014e3640ac5309646e70a9ba6bfbd8523229eb9120d83cd9121774dfbda9e56074e87266e054821d03bb817dec97015088b4c1ba768b564238ca338dd72a59372c54e0e8fec70569b34b3c41eba733f02528cc22710c4"}}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {r2, r3+10000000}}, &(0x7f00000005c0)) timer_getoverrun(r1) 14:40:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x6690ac2f147b16bc}, 0xc) [ 936.474306][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 936.480122][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 936.485984][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 936.491765][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0xfdfdffff00000000, 0x0}) 14:40:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:41 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f, 0x401, 0xf, 0x3}, {0x8, 0x7a96, 0x0, 0x1ff}, {0x1, 0x7098d2d4, 0x0, 0x4}, {0x100000000, 0x1, 0x7, 0xffffffffffffffb3}, {0x10000, 0x10000, 0x0, 0x629f}, {0x3, 0x80000000, 0xffff, 0x9}]}, 0x10) 14:40:41 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0xff00000000000000, 0x0}) 14:40:41 executing program 0: r0 = inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)=ANY=[@ANYBLOB="030000000000000069ee91cbc79cf53298817bb89eaf7d040000000000000000000000000000000021000000000000000001000000000000000000000000000000000000000000000000000000000000f6d9c65872c6a2539730910d3c93ddcffa266a0d1e839692000000000000000000"]) dup(0xffffffffffffffff) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)=0x5) 14:40:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) [ 936.874312][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 936.880273][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 936.909827][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x2}) 14:40:41 executing program 0: inotify_init() r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x7fffffff, 0x101080) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1, 0xb831ef9b1c3dedcd) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000300)={0x8000, 0x4, 0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4096, 0xfffffffffffffdf0}, {&(0x7f0000000080)=""/135, 0xffffffffffffffde}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f0000000000)=""/31, 0x1f}], 0x5, 0x0) 14:40:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x3, 0xab94cf6d9c956120}, 0xc) 14:40:41 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:41 executing program 4: setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x3}) 14:40:41 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x200, 0x10040) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000240)) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x480c00) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x5, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000080)={0xc3, @empty, 0x4e21, 0x0, 'nq\x00', 0x1, 0x40, 0x29}, 0x2c) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x424200, 0x0) recvfrom(r4, &(0x7f00000002c0)=""/130, 0x82, 0x80000000, &(0x7f0000000380)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) 14:40:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x592b, 0x6, 0x400, 0x2, 0x4, 0x20}) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0xfff) 14:40:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x9, &(0x7f0000000180)=[{0x8001, 0x3, 0x200000007ff, 0x7}, {0x10001, 0x8000, 0x80, 0x7}, {0x314, 0x0, 0x3, 0x944}, {0xffffffff, 0x0, 0x0, 0x9}, {0x8000, 0x6, 0x4, 0x3f}, {0x6, 0x5, 0x4, 0xffffffff80000000}, {0x7fffffff, 0x4, 0x7, 0x1ff}, {0x7f, 0x0, 0x10001, 0xfff}, {0x6, 0xd13b, 0x5, 0x8}]}, 0x10) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000280)={0x7, "816026a895d780551e1344d2a6e8b539f50d216a4a84f1beb46864b232f1c91a", 0x3, 0x1000, 0x5, 0x0, 0x4, 0x3, 0x5, 0x10001}) inotify_init() inotify_init() r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x1c\xa9\x189\x1b\x14\b\xe5e\x02\x8b\x06\xc7X\xc3\xa9\x96W4\a\xf0\xea\xc1]e\xfa\x8f\x1dH \x97\x01\xf1I\xdf25]\xc5\x86\x04\x00\x95@\xcac\x1b\xe3\t\x83U\xcc<\xfb,K\x1c?\xd2\xbb\xd6\xf5\xef\xa6\xf7\xb3$am\xdf\x95~\xf6\xe7X\x18\xc1\x00\x1f\x82*\xec\x86\xbe\x7f=\xc7\xe3') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) r4 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r4, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0xbb6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xa5f3}}, 0x5, 0x1000, 0x2, 0x2, 0x6}, &(0x7f0000000100)=0x98) r5 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect(r3, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x1, 0x0, 0x4, {0xa, 0x4e24, 0x5, @mcast2, 0xff}}}, 0x80) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x400, 0x6, 0x8001}, 0x8) 14:40:41 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) [ 937.469689][T16681] IPVS: set_ctl: invalid protocol: 195 0.0.0.0:20001 14:40:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x4}) 14:40:42 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4500]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x404000, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000100), &(0x7f00000000c0)=0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) [ 937.653457][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:40:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x5}) 14:40:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 937.878076][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:40:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x40) write$P9_RLERROR(r2, &(0x7f0000000140)={0x21, 0x7, 0x1, {0x18, 'md5sumppp0mime_type%GPL@'}}, 0x21) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) 14:40:42 executing program 0: r0 = inotify_init() syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340), 0x0, 0x0) 14:40:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x101, 0x101000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="f0c32abd7000fcdbdf250300000014000200080004000800000008000400000000003c000200080004000000000008000400ff03000008000b0002000000080006000600000008000900070000000800080005000020080009000a3500000800050003000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000800}, 0x8b38c1f1781768e9) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0680c}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r3, 0x110, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x22}, 0x800) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x6}) 14:40:42 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:42 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000000)={0x7fffffff, 0x4, 0x5, 0x8, 0x11, 0x40}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000080)) 14:40:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:42 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x181000, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) socket$inet6(0xa, 0x5, 0x7f) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0x8b) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r4, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', r4}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x650082, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000000c0)=0x6e9549d0859b5057, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r6 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r6, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r7 = socket$inet6(0xa, 0x88000000000805, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDSKBMETA(r8, 0x4b63, &(0x7f0000000180)=0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r7, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x80, 0x0) ppoll(&(0x7f0000000900)=[{r6, 0xa9ccc5df4bae32b4}, {r7, 0x20}, {r9, 0x8000}, {0xffffffffffffffff, 0x200}], 0x4, &(0x7f0000000940)={0x0, 0x989680}, &(0x7f0000000980)={0x43}, 0x8) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x7}) 14:40:42 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7500]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:42 executing program 0: inotify_init() r0 = gettid() tkill(r0, 0x1000000000015) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "b4d37493539189f8", "fef418e9713f2c1a29f6ba9091ef1982", "9dd03aaf", "e7f3944b196bf1b4"}, 0x28) r2 = syz_open_procfs(r0, &(0x7f0000000040)='oom_adj\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000080)={r3, r4+10000000}, &(0x7f00000000c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000180)={0x3, 0x584e4f53, 0x1, 0x2, 0x1, @stepwise={{0x8000000000004, 0xa}, {0x80000001, 0x200}, {0x1000}}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r6, &(0x7f0000000380)="c68d39b6b76b766c47f8b6b31d15cf8d2acbf50730590bcd2f293893b7a52e07aaaf170946f079c6218a77b9b0648d4857829d78c074c24bb48bf06e82595411bc8ec9064abf22227a6441bfd222edfb4a78d250f13d845b64856ce3932202250d93f7eb1ecc338dcdedec1ab18f2a31a8686f1c637e4ce42750a858023d90a9b3890a037f4224600c599a11301a589ccd8931464c9d", 0x96, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYRES32=r9, @ANYBLOB="007e1996000000b12611ada5320e008ad6a09fe34c51b7fe59c4b599c09334a97b1e67fc176933574a0a14daae848b8454a4ffb8768ab979a6d5ef62d1a7f56839ca2bbb625285ae33fb5a07a008264bca4a6a35284d03133acdc51c5f12c5a51cc1227fdfa45133974bbd2a2e74b10000000000000000000060224745665ffb8b6f000000000000b659aa9495a142a03f0754b6f438d4e3cc0788000000000000000000000000000000000000000000000000003e31d94bd97aa2f19becdb823f9c012c7dbd64674b3fbcc86aefefe152f727d18f868b142c08e932f5d6347324b4659b8f05273cac6f49a3103b4ea9f2033144dc68a7d46f95c373d4f81323e6b844379bc0aea15d270700238842ad149c24f1a2d4fd565007decd0baafe"], 0x9) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={r9, 0xcf8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={r10, 0x3f, 0x1}, &(0x7f0000000300)=0x8) 14:40:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x24c02180}, 0x2) [ 938.542453][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:40:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x8}) 14:40:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)={0x8, 0x8001, 0x3, 0x0, 0x0, [{r0, 0x0, 0x5}, {r2, 0x0, 0x7}, {r2, 0x0, 0x8}]}) 14:40:43 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:43 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x80, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0xa10000, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000004c0)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xa4bb) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0xfffffffffffffffe, 0x200, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0xf0, 0x7}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) recvmmsg(r1, &(0x7f0000000340)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/96, 0x60}], 0x3}, 0x40}], 0x1, 0x0, &(0x7f0000000380)={0x77359400}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x400200, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000400), &(0x7f0000000440)=0x4) 14:40:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x300}) 14:40:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:43 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x500}) [ 940.644316][ C1] net_ratelimit: 18 callbacks suppressed [ 940.644325][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 940.655931][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 940.661740][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 940.667551][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 941.034322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 941.040225][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 941.046058][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 941.051855][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:45 executing program 0: inotify_init() r0 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x6000, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @local}, {0x303, @local}, 0x0, {0x2, 0x4e21, @empty}, 'tunl0\x00'}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x4, {0x1ff, 0xffff, 0x379, 0x1, 0x9, 0x6}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:45 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x600}) 14:40:45 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x4000080}, 0x255) r1 = accept(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) 14:40:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:46 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x700}) 14:40:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:46 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 941.834283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 941.834361][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:40:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x3f00}) 14:40:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:46 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x4, 0xfff, 0xc6, 0x9, 0xffffffff00000000]}, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) 14:40:46 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:46 executing program 0: inotify_init() r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x3, 0x28f, 0x400, 0x3, 0x1f}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) socketpair(0x7, 0x6, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r4, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r5}, &(0x7f0000000240)=0x8) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="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"]) 14:40:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x4000}) 14:40:46 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:46 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x4, 0x0, @pic={0x100000000, 0x4000000000000000, 0x7, 0x1ff, 0x4, 0x7f, 0x10001, 0x8, 0xffff, 0x0, 0xffffffffffff9cb8, 0x9, 0x9, 0x4, 0x6, 0x8}}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x602800) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x7, 0x9, 0x401, 0x100000001}) prctl$PR_SET_UNALIGN(0x6, 0x5) 14:40:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:46 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x201648, 0x4) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r4, 0x1000, "c3494ce1502ae58e290242adfbb0f74e1244c07763ddb6dc9a81a090994c7d5b925ecf600d3416f15869eed71f429f7ac22cc2dd6e3ccac51640bf6c77463990dfa6fdc51f9b9a56329930a16421f262e2feeac694924417030cf7602c418c9515783aacc2f727e8ebb5f5eb093ed7fed4c5fa73a774a01f1c21d270f9fb6ee77659bc5a65b5ba4c11e5cc0e7f8311faeeced2ab39b37b6d02ed54a46a257489210af163169026ace9befc359298c352d94f5676e7fc3fa9e523a771dadcef8a8d86487354b2640b2f6309780168d2511dda72495d06efd10936cd3493562ddd978081c072c70bd2648f42e839998100b85c0f191476eddea8056d5f5beb9a155c9e2c88c363370f49713f95541dfbe12aeac9d52ddc1633ef400edd9712507f8e89afc7e34be06ebf8c659b62303a944b7a6823be273323d9b676ce3dc8cbcef2aee162ff4166f03f365887fe5863d696a2a8e88bec9164dfc8bd8ddeef5021577f1b43efaf839ca68da0b173ead8c9ba176382b9916c93a7c84da9fe08e4672b27bfb496e2a15f7243fad0c609dc52e73990983f5225bf0455d549766000a20386f8cd7de7f11fe3a4568925e0ab4598b65b947d01cbb398cc71cf1bf85ba84f69f70d37f185371e4d18cc1a07cf6a7f899c4e591ed2feb22b92f873d6603bab1dba61bc2b8b10b2f3a6d03bc5b8ac81ef201c8dd7eef67c9200c85c05eafec41671c5d941449d6d7488d76cc015cd0ecba21d11a930a5917b05dbb169bbb655ba17412af5e3530849d4a2a3fd3731cb3d5f019bee5f7743fd9e03f8de29a894f7ca4e1fdbc7b2362486dc74665bb6955f56d523b926a5974f7118a46307261fe384f812707bbb662176b93dd63e626617f67e20a58b1e1e471d39fef1466a278a7770b7d083c4fd96a06ceb9d83a793ed042df161a8b89f32af7217ff9abcf8e4ffaf33d9a8585935f73a6a68c2e3a0ee4c8c60c2fef42bdb0482cbb275c1bdd2621d8ca4e9b7698eb87b0df2f62f6d49dd9f81d811a159f0bd11c789ef45c33be30204146be3e37f3a117c85d14f097ec9f31438998dfe069811f6b04edab6725237adb483d8b479c892602057c44d1b8c58c219eb2ac115e563b35c4aa254573ff6cf76b45f089af3074484bbd890c804754719c7ec89d57e68f9d1dacfb14dfdd1c8a6c0c30785e5d89c79dee204a411dfc40db96fb8a484e2c80e7cb755c2e71a385ac87016d6e5c635a0443111e8b8b2d429a46afc75fe0ecb8e56cdeb15dfdaca00134baa84e38069388691e590ad3598ebf45c7b7464dd34b66c75557450036e5752e7eff8b9aeca7bd5315fa0cc8b9cc53e872017c3d52aba8a1a62bc313b3be35fa582cb8d786da37b30d821551caff838917fb637b683f15921562cfe7481233783e453c1841ba3dbd67f54d3235429d46f38b9c8b0727d27d5d5024b46db05577c315490bef1a1f5e7901207d03878671ca52648e38abbc9a72e4528c44947500977d9e1006b83c7c92bf1a59914a174678a9b9366dda4bf67f64a29c1a0d22a79e02fa6ba2db17e5cbed2698ba9b79d3c56074e42dd8778a2f8766aea2008ab27e4407bf1a2dddb8a83f7dff9c468ff59eb1bb29630f1569aec2929e3a7b87cacb4d017a20b03bf210a4a177ac8297856484887db5e93e11b89b0decd105f9d2a810251d843906d01d5ac4973bd95fde93760105e12d1a2f414e398dffb1781a4a996d001ac681df031583b52e1c7027ded9f058c6ab30ea3bb4f920dec32bd35271f2322530799ed0f5a5aefd629dcd7b694c6d883b55fd3ba7f0306fdfc812ea52ff332193560c8c3218eab09daf9825836d75b706762b3baf33093742230d0aa5da156d680eb37f00be4a99c5ae9a9f935eba8895ac88b040ff3aaad808458e6c5ac0febaef3c9e5bf3e3ef93960288079419c6a7c8b34ce1109173f2c9051b61e9aae63354bc6bd85ce2c040c336c3cc9a42e4eed8030e2c3eeaf7079c708f4de22f61aebcae663f09e71fc6ea5068232381074e6d2716e081ce02189ec80dc2e2024553c75e6bf9a8fa3dacacf56ce05e519e7c048c2c4bcc682cd850513bf1c2746fe5703b4ddcc966d08a0817d19a8a49c8f0336080611320553f412ac02d0206ec4f045f33368852af8e08e39a98cfd58d9c07dee61605ec8472811cbd07043905459e6be73870aa0cc3b84a24568051eeda34fc285f45dca8f68807c4ee5ae44ffeb983bd40f10df8cacb3af86e113244830a24164ee7f66cdd4decdfdbbb9074c643048dfd73248d382f0bd11af751f8c1383c8cb3006194351b6927d1037323e60631c46d6e14290a6493577fe02256a2ddc790be64918745415aa461dc90fb115b6ac21885c0250e4e052a38745009bd952c0318cb23e4427e8853529ed66c2f2429143d894c597bec643882a71feabcddf6e5c2985b0ac86f2b39749f788f7c34accbaa3b68bebcddff02f72b3573855f1efdd07b03e25854c354e314ab0a04f2541531d8cfb2ecb4b5bf589ac7e01a60bcea31235968a960b103bfb6440e846c2529aabd41b5e4411492ce1ce5562f64efba20c6606b74de02e391669b2870a94811bc0473e9191e66d1c537118f80d8e538b671cfd1249e2dbcfa904672ce11db29cbede5590a9ac9462c3943dbdac38ebc7e3de2f4555b095ec04e18f54ecdb46ea59dc0ff43dd40ec8546ba799a1141d1077695564c076f4931854d9a55664cd85f08fe6735dfe0fe031c653697aa0babb14320a83d53cc717509630ae8ea3387f6fcaac77a45068ff77c658e24d2710a24df0d3f227107c6222d9d534f7939df32b5689bcdff22e7d3b78457577f32d8fa8522704b3d5d3ce5268cd42023b54e07b79adadca8bce688642bf9672c1944a70fdad841b4c278a16ad02bb778dca6832b510615aecda1521144c013109860f612ea2a16358d1665327ccac66aa2bc839796fa639cafad6deb2f9b5bd139b924ec69a33a43de83e3cc236083e01c1bb119114dea1838c67cc02dd28a9cf7e12fb87257ea1747c04a554e897a36bac72d183aa6bc9f8f5fdf222cf33a4af603b48246b7774b922f377986a9232dde92d2056f502176ffdd6a73d9c094897c8bc05565dbb522bfbca993912b89ac38092ed5d068c73934e768d6f234432576e6885890efd2d36cd7836a904b8466a6ee6838f80793c5d877a6447440211719f833d44cbddd189394c474b2a5b2b2314b5ebaba30ce506785b135203a795c36de193b9bdd49550c1f856ed04b1d803056dde36956c4a5ed452fb1559d09be5eaf4ede36196530e83230da90b0f4bfdc429c5ec196f8053884319aa60229e55873378779ff4f26f182b218e5249dbfe67b81e49f4667f003371ebbbc4dc140ca4d4f1a71cabe9b1be87cb0dea24eafb692ae616e56a90eba05ed3fbb7dee59f0eb8d8d83af84bf7310b67a4a9dac725cb218287b6fc5de2d576658f9178218568504a1d683fe4f23fa7da0e6a7d26fa34879a5be70668e78ebf5ed7f6bff0858a63711da25b3c087f53581dc40f1f7941c845957d4bd13bff21e4de43a6cd647ae550d9f441f030f0a0cf3eed9a66dff6901324b829dce1696b129bb4a5fce6df29e7f52e7949ac1ec9f24401924ace43dcac3f306125fe4f38beaecf52d8e9a5525db129bd7cc6c0f72bd049506438d9164b779f4089828bbe9c531e8302798c6c7cedf0cd455422daace7ed635df33502ac25256980c1d79f6de025c50a6f49d8b6ccce10b2a78a491fed773b6adf75d78901087697c3c7df9b170e1b2d700aca5888b848c26151f486a0a81d8911674732487e73c345cd0fbe605a67ed62b81ae71dba5a3a462112399b98cf79e34079e25ffc0ac270590ba9b837134da50d2f0ebfd9887be5eb3314476e9a2a9df85ce71c886b5332067175275069bf80b489ecb00cf204f42f76ba4f707583b6929b3b46dc0bb1ee0797de6c4736322f9bfbe770e00a55d8ab03a425534f687c79cd86ed82a20c9723ac38158833e9b836c865ba3d5e98f37786e1c26616bc46d029e2de2b661a0341253e6fd35bc103bc175a165571cac2ced309c7ae4aa6172e781820f9d5d3bdb0362cb08e8326cbd5c8bb69fababa41b92d8c7191fec80fdc270e4c38186f86f9855e78bd122154d363bbeb985c841ae7d489a7275a18f19ad0b672f7389c4aa56a9ee6c246721044dfbfd23c70e2dc70ef9e11aa3566551bd663db83395a6db80ccdfd78acdb1eb73221fe0ae5bb81f7251894dc210fb6cff346f42a69731b43be2fcb2653393856d1342114d363853d6e161f01178e8aa13710a2ad6ad4da6b94064bc792faeb06dcb9a486c0fef095e1a648ea6e3066b73556ce7748f1e3970ada9ae544d5f3e0eaea2849beab8cea7bc9fd25a8ad2a817b5ee3060e9a98145b642569337b372b2103d61f1c970ba410632c0a3a3ab794cf3b13403152342ee16ebe6caa308540166e46994282f187a27a2e42d95169a78108eccb1fb9097977db5cc46ae76e613ad93809b5de2f7d2556a8c9224bfb6a1fda5a2c22de10d98427a72a29d3a55e17bda73f3c8dbe2551528c49203aa812f105e43cbc32ba7bdecfc3d6b4a4af2dd2a332ec35e1e4b7d7fa4439e28c51f641342a74a1a98261933d26af09911a81287bfe3ceccbc50fc95fd7e8af65a0808919b395d7193194fccf7087ef7a47a48854cbfde7b1f5eca4309e1a41753b65e83bb5ae493158fb3e9add5b37133e95c6f53056f22ddd17ab5249340fe1cd50c70673949df0b2fd60a31966e52961b46d2c6ad50b03ca0ecfabd59aecea0dd36767dfe2d10a9ea3827dab623c6ad6b37b401c1d9509fe38d207c10ed527a952c703f0e9a5d9a59dbfb803612b9188320d3c454b6312308f5b3a427281b1b8984419049e24b92055bc9429038a260712c5362fcbf7e5ace3e34bd5f1d141011d7637b67d13fa3df45201e00f70eb0f70ce5bff9ff6feebe8085061c19ec381d63b1edc4a5bbbda6a1550b8575b3760b5b12ccc86f9bc9156ea3a6580c8fb2cea389b7337d9377030aeb0211e5bbfaa803f5b562378b38920330d79a5ed44961e0864d70557556902b9a2a84bf65f2d6d86e7469b6aca297e13d376ff6aede331dcba1f99ca0e719c4677789c6d48379e85e81b47f8222e201480a531f56fca99c50fd9d5aae56e5e141a726795d7f1e98c0ceea0e1c1a0804aca671993a2210b0949b7640f78a108136cec06e3c807943df04dae9431c32067bddeac0e56130491f14353e6fb278cf381a376eeb8ddd99b1b3921352f5d31b9e89f643e42bad64ed976611e2c138e52a2b880225782178bbdd0f9ff0581e06f8043ba61da929179bb261f58007863c46414cba90d25bcb0742891298b39ffc0bd19daa256a27f8f0b59ef640996157d92658e536e5943a8dfdbb0c4975dc2823bf9415803d29b8523971255332f67eff6e32d4a9c7168c13a510de63c0c41fcfedc8bd848556ea1b05be744ec2cbdbc39828090846f0baddaf70c658f1e3afb1d5f27010ec8c0b8387ef36029b72af0840794ac3d1453ee910cc187a0d2138fb335b4ddd13dda2542bb37d139bddf1a28259e2cd138e70039a0aa92ec8f4d5b5ca1fce7b118ce9bb084ea9f462f23c48024c3d5700b8030fbc64e57b00af637c81c8f61fb8c45417afd0a2cd3d3dfae644bdbce14f535166af60b6b1c64e59514b08da7ccaa491b7ba676d2a4a3419973e26f4ce90da0cebe078a328890d49e07d7957c61a569d5b5124c4a49e1f594eac1a300a96967"}, &(0x7f0000000000)=0x1008) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r5 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r5, 0x4b31, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x100000001, 0x2, 0x10001, 0xff, 0x878, 0x108}) 14:40:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0xff00}) 14:40:46 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:47 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) [ 942.607935][T17509] sctp: [Deprecated]: syz-executor.3 (pid 17509) Use of int in maxseg socket option. [ 942.607935][T17509] Use struct sctp_assoc_value instead 14:40:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x1000000}) 14:40:47 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() tkill(r1, 0x1000000000015) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x8, 0x7, 0x9, 0x10001, 0x80000001, 0x4}) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:47 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0xffffffffffffff35) 14:40:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:47 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:47 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x2000000}) 14:40:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x3000000}) 14:40:47 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x2c105, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1002020, 0x4) 14:40:47 executing program 0: inotify_init() openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400840, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0xa811, 0x80000000, 0x800, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) 14:40:47 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 945.994364][ C1] net_ratelimit: 21 callbacks suppressed [ 945.994373][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 945.994403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 946.000093][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100000000, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x7, 0x1, 0x400, 0xff, 'syz0\x00', 0xffffffff}) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x84020080}, 0xc) 14:40:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x4000000}) 14:40:50 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 14:40:50 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:50 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20001, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000100)={0x2, 0x5, 0x4, 0x5a7, 0x2, 0x0, 0xa}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7aeb0000fee2c2a522c8f42cd03c374187bb938b74abc5c9918f3d07a7364c764a3d21ce22ac360e9f13fdff90efb29a50650267e10b0f3c5db6a40adaa99c0fd8e50946b8b6d9f90269d59b9542144826acd678203a1bbbb8ec"], 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x1, 0x2}) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x3, "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", 0xb9, 0x4, 0x0, 0x2, 0x0, 0x1}}}, 0x128) r4 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000240)=0x9, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000cc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0x2f6) setuid(r6) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000c00)=""/176) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:50 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x5000000}) 14:40:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x1, 0x4000080}, 0xc) 14:40:50 executing program 0: inotify_init() r0 = socket$inet6(0xa, 0x88000000000805, 0x0) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, 0x20) r2 = socket$inet6(0xa, 0x1, 0xa732) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f0000000380)="91eb098f3f70a43c9e77c74f9fdab274f522516ea618d3424dbddefad4e5639cb88c6ec3c68c8edaa971345004626bd8adbee15d23f8f24b1d5c5aec5d232d23217fb052aa8d48bda197929cf370c331d4bbce61fceb1739b00e6f56dbeafecb3700ae217b3441926203c689fdc93a0572878a3ff1c98064b6da76f0f391a29ba342673b970bb67b83a0af99224f81705ca4e49df65ed96d8bf893b0f513f585fbd04174b1652ddf1ea706b90d145d82c85dff01af3fef372aa04d7ffcf29aa9135a6c9aafbb", 0xc6, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/59, 0x3b}], 0x31b) r3 = gettid() tkill(r3, 0x1000000000015) ioprio_get$pid(0x1, r3) r4 = gettid() tkill(r4, 0x1000000000015) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000180)=""/61) r6 = gettid() tkill(r6, 0x1000000000015) r7 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x1, 0x418200) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f00000005c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r8 = syz_open_procfs(r6, &(0x7f0000000240)='fdmnf\xc4\xb933\"g~\xdc/\x93@\x81\x06\x1d\x84\a\xfd/\xbf\x19\xde\xea\xa6C\xc6\x1fl\xae\xcc\x86\x95R\xcb\xa5_\xca\xedy\x9aV}\xe6\xf7\xf5\xe1\xe7:e\x93\xe9\xe5\xcb\xef\x821rnL[\xefX\x85\t\x00\xe6:\xc7WC&\x83gNjo\xd5\xbb\xa5\f\xd5\xbe6\xe7e\xcae\xf3\tEw\xb7\x9d@\xb5\x13\xad\xe8^0\xc4&\x9c\xc8\x904\x90\x7f\x02@P2\xb4Jy\xb4N\xb0\xa8\x91\xf7\xa0\x94\x87\xa0p \x7fz\x83C\xc3\xec\x05\x00\x94Z\x8e\xc8\xc8EcY\x83`\x93\xe2E\xc72E\x05Iy\xbd\xd3\x92\xa2') preadv(r8, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x2000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000640)=r9) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc808404}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x12d, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44) getitimer(0x2, &(0x7f0000000540)) 14:40:50 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x310102a0}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x4000080}, 0xffffffffffffffbc) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000080)="ff8f9916ac9e5ece3c294c1249def2c19dc573a14b690416f8f2e7c2377316bf0c7ec7ff3939d5239016123eb7505172de14ca0cfa2c1440121cc9a4a47c4b89312cb0994a09af707f24ef952dc170eb6b5dac41f7ebef15127c8a3a57c6dda7d6487b6fa055efb878421c81fd6727678ba8623527fb83ee582f58e4919c2a515495ea2914fc861304c87e7f770a65d7fb31df4600b7e2d97a803790fdeb93e510806418930b03390c2ca5e2e2ab1a664d116d5177cb14fb5ea05fc2e6426b4c40ae30b7992e11b9257ec51a2e3424c60e97b23a6856437ed39e") 14:40:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x6000000}) 14:40:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:51 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) 14:40:51 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = dup(r1) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/251) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x7000000}) 14:40:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 946.874355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 946.880188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 946.886081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 946.891947][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:40:51 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) open_by_handle_at(r1, &(0x7f0000000040)={0x74, 0x100000000, "932917b2c2aaf0eb3f210fcd0de966bfa9e402fc6e2ea067083e0f961c5aa101d92d658a0218c883ed27616a15de6ff70b12574f65f168e51dd79bf03ed16c79e756e2bfe2e6803f632e00015ba93ed9738930db84f817eaef51f041e9fd7ab12bcac840f054b069ae3afe9c"}, 0x0) 14:40:51 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 947.274304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 947.280132][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 947.286001][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:40:53 executing program 0: inotify_init() syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x3, 0x80) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x3, 0xc, 0x4, 0x4, {0x77359400}, {0x3, 0x0, 0x8, 0x1ff, 0x1ff, 0x0, "0f15b2d7"}, 0x9, 0x0, @fd, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/46, 0xfffffffffffffcfb}], 0x1, 0x0) 14:40:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x8000000}) 14:40:53 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x2}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffad) 14:40:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:53 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$TCXONC(r1, 0x540a, 0x80000000) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) 14:40:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:53 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000480)={0xffffffffffffff7f, 0x1, 0x48c, 0xb1, &(0x7f0000000300)=""/177, 0x80, &(0x7f00000003c0)=""/128, 0x0, &(0x7f0000000440)}) r2 = mq_open(&(0x7f0000000040)='@vboxnet1K@\x00', 0x800, 0x10, &(0x7f0000000080)={0x7, 0x3ff, 0xffffffffffffff18, 0x9, 0x5, 0xffff, 0x3f, 0x101}) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x0, 0x4}}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r4, r5}}, 0x18) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0) r6 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r6, 0x4b31, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x81, @local, 0x3}}}, 0x30) 14:40:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x3f000000}) 14:40:54 executing program 0: inotify_init() r0 = gettid() tkill(r0, 0x1000000000015) syz_open_procfs(r0, &(0x7f0000000080)='net/ip_vs_stats\x00') r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) preadv(r1, &(0x7f0000000340), 0x0, 0x0) 14:40:54 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 14:40:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:54 executing program 3: 14:40:54 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x40000000}) 14:40:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:54 executing program 3: 14:40:54 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0xfdfdffff}) 14:40:54 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = syz_open_dev$midi(0x0, 0x2, 0x14002) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x100, 0x4) 14:40:54 executing program 3: [ 951.034299][ C1] net_ratelimit: 16 callbacks suppressed [ 951.034308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 951.045867][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 951.051673][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 951.057469][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 951.434368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 951.440200][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 951.446076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 951.451954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 952.234323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 952.234329][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:40:57 executing program 4: setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xda, 0x3, 0xffff, "584bc4ececeba64a49ea14f87e5d23ef", "5f38d575c27d920d7d5fde67930749e48bb67dba1447925798fbb987b12c3d55823d1ce343b2f1dc720e0fc33a0363e3b721822f8e717caf98ad28408b8cb72fc435e1381ebb27676218e1b1aefa0b21d79ac842d903be7a0bdf462d71f8244af2b5bd416e21ced9851c71961873710c387685abd1e9282c44ce5071476a97f2f9a58e2bdeee970dd7c669f6185657828ea8e5f36311c9052ed9520eda9ba9cc723c11643463fc5b2edd5770fbaa94d0c3cc3f025e865766b1061f36aa716fe21a741d2885"}, 0xda, 0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x4}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x4, 0x0, 0x1, 0x7ff}, &(0x7f0000000300)=0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280), 0x4) 14:40:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:57 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:57 executing program 3: 14:40:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0xff000000}) 14:40:57 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="f0c32abd7000fcdbdf250300000014000200080004000800000008000400000000003c000200080004000000000008000400ff03000008000b0002000000080006000600000008000900070000000800080005000020080009000a3500000800050003000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000800}, 0x8b38c1f1781768e9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)=0x0) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r6, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000008c0)=0x0) r8 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r8, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000900)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000a00)=0xe8) r10 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540)=0x0, &(0x7f00000006c0)) keyctl$chown(0x4, r10, r11, r12) r13 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r13, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r14 = fcntl$getown(r13, 0x9) getresuid(&(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000640)="c3a6972c34016f0ad15baae4add7c01f3a96d646a08fad05efd40b8a9cbe8c1acb5e7ff0960331aec5e1e541847b802a196aec4177405ef92036ecbd0445b1e305151027364f268e5a8251b2e047486a60c5ce6dedb686d70af5c17b5215b662b4ae7aa11aa20c32a2475e4b11779497be1c50c1e5ed42c6bf08f3f7ae9a745c1b34d22fd4271876a072faaed71362bb7eb556821b111f2b167523890c6152e40735", 0xa2}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r12}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x60, 0x4040011}, {&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000c80)="b231b5fba812778a52a2b5e80e5773e35ac4bf45fe4170d1c4ff37015182658c6920cb9d120db5f282dcbe21542023954b2436fffd6c998228eab67b20fdfa6fab36ce2ea43efea22b2325a2488f2a7694d661ba915f488c", 0x58}, {&(0x7f0000000d00)="04d7adad7cf484f3b9bb8a81d11cf086b7dcb9fbe97fbe4480725e505ee97679b1bafb6611fe7dd61e13d730a6e41538dfadef66688ed2cf1183b896a83ebd43241d889b2f816a85dc9b4c6319c1bb1a4ed4871789d659eb8befdc1bcbe0aad4981f61a3e2c1776972c6079bfec56c019f03d2055300929e5cd5d5299eaecd33476c9fd8fb6f8116b1f6812ce59f12035f4781d07f77b62b313a0a1caac7f706c13b01a01c65d15dad4f61877057ae4f15fd9485b17330a170485cf8b8ca9d7d20d1", 0xc2}, {&(0x7f0000000e00)="fb37ac93052daffcf965ca8e3561d37d428e35969eadec005b9459664005b991f9e82a96e453c5f7a3ea86690fb041620a1f9e6bf3661a61df609dd78e8279fcc46defd4249c62116082fb65071185ec3a262ed45450b06851c3003747847a7eca4454742890c6c405f28c93ac8eebd3256752ca75eebb484cb1d43b21a0217cd7b4d13dba11fd6864c417755ed2d897091a12a474f2641e450034b02034f823835e7925", 0xa4}, {&(0x7f0000000ec0)="16e5a36f3db0d2ddce2623d72ea5e68c59921696388103f60f35f86f6f84ffefad80a7350136de275b1aeb2c25e039ba37b8ded59112daba7b73679c176e2a029c06f3127405555de50a5d029948d0f0e5116cac193d1c3bcf5b1978aa2b1267327080f87841f7a93a59c3726d3171527427", 0x72}, {&(0x7f0000000f40)="a11b42ef139c46ea6553a66cd783d1b41c9854b58692cc8d32df6781221a6124e2a609f494bf1a467e6af16d049448ac2f0166d3c183b2ed16956e261097834ce76c9def0d06c440e1094333450fe454586a19c6a2014352e0c213efafbb6ead90a6fe970af395f6097490e66b71541dca4b16b553386f639c039d51af27c8ee230b4fcc1bfdd4cd2ff5c3800eccb811691c1d78e1c8dfec84f8395b8c5f552a3917e3db4bfd42ea05d68d716ecaf54428e76b85e2040af2271aa72e6ac4cc5389d10da9c59fc8c77243537cf3d32caa18296490d55ef28cf389f6e246db8b31d6a9371e5d74cfc9a0e3ceb552130cb0ec42703c62f976", 0xf7}, {&(0x7f0000001040)="b115ffa3c7641819f218bb707469ee5d57f2872b9d3978719bbaa53fce81f481fe6d63de450db5bdb5ba86e3401cefb94fbe30712f5fb868587c25363062a37622bb0a81b51a845aa6620a6e17b71bc691678bdb", 0x54}], 0x6, &(0x7f0000001140), 0x0, 0xe090}], 0x2, 0x10000010) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xc4, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xae}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r17 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r17, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffe}, 0x20) r18 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x424100, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r18, 0xc0506617, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000003d8e313f6465a37b7862c20eaf21ff956d0000000000000000000000000000000000000000000000000000000000000000000000001d699248371783f4520bdda2baeeef77cd011973aea028f06232b4eea796226f1c8a083f7a2cc981fe06a0d9840337e7e3ec50f4793e747d1770e5413a3ccf6e85f0289f4b8efa0ebb61253f1323e855d293e3718e3d24d1af3b78ec17e93955d9b5e883d644ca3621021ff500000000"]) sendto$inet6(r17, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x8914, &(0x7f0000000000)={'veth1_to_team\x00'}) 14:40:57 executing program 3: 14:40:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0xfffffdfd}) 14:40:57 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:57 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) close(r1) io_setup(0x40000000085, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x3c0}]) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f0000000240)="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", 0x1000, 0x6, 0x0, 0x0, r4}, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) r6 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r6, 0x4b31, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000100)) sendto$inet6(r5, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 14:40:57 executing program 3: 14:40:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x100000000000000}) 14:40:57 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:57 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x200000000000000}) 14:40:58 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) 14:40:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:58 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x300000000000000}) 14:40:58 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r1 = socket$inet(0x10, 0xc0006, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x4e, 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40201, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x101, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0xfffffffffffffdf4) write$P9_RLERROR(r2, &(0x7f0000000240)={0x2d, 0x7, 0x2, {0x24, 'user+(:selfproc..securitybdevloeth0-'}}, 0x2d) 14:40:58 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x2) close(r7) io_setup(0x40000000085, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x3c0}]) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xffffffff00000000, 0xffffffffffffffff, &(0x7f0000000080)="780f1db921e9908b72c86ed54ccd70a8ccd20a37448171306bbdf2ccc9e7d76c51ade883e5", 0x25, 0x9, 0x0, 0x0, r6}]) 14:40:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x400000000000000}) 14:40:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:58 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:58 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/156, 0x9c) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) recvmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/82, 0x52}], 0x128}, 0x100) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000500)={0x74, 0x1, 0x1}, 0xc) 14:40:58 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x11L\xe7\xefN\x84\x99gf\xa0\xdc\x86\xb6\x18<\x03\xb3w^B4\xa2u\xb0,=`\xcb\xe9L\x8d\xb3\xe3R\xa54\xd1h\xfaMo\x012\xbd5\xa5\xfeB?u\r\x04\xe8\x96U\xa2\xa9\x95\x0f\xd0\\\xbc\xaf\x142\xed\x0e!BV<\xac\xf6\x1e\x04`vSKb\x12\xa2\xbf\x17\x89|\x89\xec\xdf\x9fa*\xdd\x8bm{\xf47\xb3\x96\x9d\xe0[u\v\xa8\x93<\x03\xfa\xf6\x12.\x94\x00%|\xdbI)m;\xb9\xa4~\xd2\xc7\xd4\xf0\xaa\xfd|\xc4-\x01\xb6\x95:\xe1\"\x99S\x93\xbd\xaf\xc7\x83\xa6{Z\xc9\b\r\'\xdc\xd0;Z\a$f\xc6\x9e\xc8\xd1\xef\xdd\xf3N\x92\xd9\x05\x8f\xb5y\xe4\x06\x17\t_\xd5/#)n%$\x95X\xf7s=\x9e\x98\x05\x8f') ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x3, 0x1, 0x0, 0x5, 0x1, 0x6, 0x9, 0x0, 0x9, 0x0, 0xffffffffffffff38, 0x8}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x500000000000000}) 14:40:58 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:58 executing program 0: inotify_init() getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:58 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x2) close(r7) io_setup(0x40000000085, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x3c0}]) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xffffffff00000000, 0xffffffffffffffff, &(0x7f0000000080)="780f1db921e9908b72c86ed54ccd70a8ccd20a37448171306bbdf2ccc9e7d76c51ade883e5", 0x25, 0x9, 0x0, 0x0, r6}]) 14:40:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x600000000000000}) 14:40:58 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x1000000, 0xce) socket(0x1d, 0x3, 0x7e) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000080)=0x9f) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x82080, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r4, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r4, 0x1, 0x6, @remote}, 0x10) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$RTC_VL_CLR(r5, 0x7014) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000000c0)={{0x2, 0x0, @identifier="70de8ea94d46d2778b0c93e75c1a3f54"}}) 14:40:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:59 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x700000000000000}) 14:40:59 executing program 0: inotify_init() r0 = gettid() tkill(r0, 0x1000000000015) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000000)=0x2) close(0xffffffffffffffff) ioctl$TUNSETLINK(r2, 0x400454cd, 0x304) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:40:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:59 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x2, 0x1, [], &(0x7f0000000040)=0x40}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0)=0x2, 0x8) 14:40:59 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x800000000000000}) 14:40:59 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x2) close(r7) io_setup(0x40000000085, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x3c0}]) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xffffffff00000000, 0xffffffffffffffff, &(0x7f0000000080)="780f1db921e9908b72c86ed54ccd70a8ccd20a37448171306bbdf2ccc9e7d76c51ade883e5", 0x25, 0x9, 0x0, 0x0, r6}]) 14:40:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x3f00000000000000}) 14:40:59 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:40:59 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x2, r2}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:40:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:40:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x4000000000000000}) [ 956.394390][ C0] net_ratelimit: 21 callbacks suppressed [ 956.394399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 956.404281][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 956.406267][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 956.411922][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 957.274321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 957.280273][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 957.286094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 957.292006][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 957.674338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 957.680207][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:02 executing program 0: inotify_init() syz_open_pts(0xffffffffffffffff, 0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x2) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:02 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:02 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 14:41:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0xfdfdffff00000000}) 14:41:02 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x2) close(r7) io_setup(0x40000000085, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x3c0}]) 14:41:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0xff00000000000000}) 14:41:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:02 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:02 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x40000, 0x0) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000280)=0xfffffffffffff801) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x100, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0401010}, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002bbd7000fddbdf250e0000004c0009000800010002000000ff000200ff010000080002000000000008000200e5ff000008000100070000000800efff0400000008000100fe020000080002004000000008000200030000000c00090008000200092f0900"], 0x6c}, 0x1, 0x0, 0x0, 0x8f2547dab1d95eab}, 0x80) fdatasync(r0) inotify_init() r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r5, &(0x7f0000000000), 0x100000000000002a, 0x2) 14:41:02 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x2}) 14:41:02 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:02 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x3c9681, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/156, 0x20000, 0x1000, 0x5}, 0x18) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)={r5, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x10000, 0x9}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r6, 0xffffffffffffffff}, 0x8) 14:41:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x3}) [ 958.362527][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:41:02 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x2) close(r7) io_setup(0x40000000085, &(0x7f0000000040)) 14:41:02 executing program 0: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0x9, "cd6949c59f2689703ebe4e9314b99726072fa937ab672afb03adaf981afedd4f", 0x2, 0x2}) inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:02 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:02 executing program 0: inotify_init() r0 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fdinfo/3\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)={r6, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r6, &(0x7f0000000100)=0x4) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3cf) 14:41:03 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = gettid() tkill(r1, 0x1000000000015) r2 = syz_open_procfs(r1, &(0x7f0000000080)='attr\x00') ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f00000000c0)) userfaultfd(0x800) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8eb5, 0x444347) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x4}) 14:41:03 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4500000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:03 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 958.872982][T19762] sctp: [Deprecated]: syz-executor.0 (pid 19762) Use of int in maxseg socket option. [ 958.872982][T19762] Use struct sctp_assoc_value instead 14:41:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x5}) 14:41:03 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x2) close(r7) 14:41:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:03 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7500000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:03 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000380)={0x1, 0x1000, "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"}) 14:41:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x6}) 14:41:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 961.434360][ C1] net_ratelimit: 16 callbacks suppressed [ 961.434369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 961.445942][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 961.451758][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 961.457558][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:06 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xa01, 0x80) ioctl$KDSETLED(r1, 0x4b32, 0x1000) 14:41:06 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0xffff, 0x3, 0x100000000, 0x9, 0x10}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r3, 0xc7, "b8dbe606d9b7bc93ed75edda4e34fa77c78714512b3a9341c8ff95dee91c75f2f669ba906342d2c669d9b4d1019fc39c2bbcace91dd857b0c1db5e243f754a40e390219bdc8629eef57b5a3d01263fd7c48373a3079622eb1683b900e330c090c1ffbd43a3cdcf8790e17b80efb3ede62fe924cbcb82e75e94362e6f542da39554a4dec62ffda9c0095ebfd49ef051ae9c767d8b7bc0e4a021159536d5bb73eb199766dee3159c01eb428a31e405419de29b0d1cdae74d09a7fb8a307086894ebd79321b3c0cfa"}, &(0x7f00000002c0)=0xcf) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/46, 0xffffffffffffff9f}], 0x10cb, 0xfffffffffffffefc) 14:41:06 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x7}) 14:41:06 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) creat(&(0x7f0000000180)='./bus\x00', 0x2) 14:41:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:06 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x8}) [ 961.834329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 961.840224][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 961.846166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 961.851966][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:06 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fchdir(r1) 14:41:06 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400200, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x401, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0x7b, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x7e, 0x4) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000100)={'rose0\x00', {0x2, 0x4e24, @multicast1}}) 14:41:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x300}) 14:41:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:06 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:06 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 962.195804][T19947] sctp: [Deprecated]: syz-executor.4 (pid 19947) Use of int in max_burst socket option deprecated. [ 962.195804][T19947] Use struct sctp_assoc_value instead 14:41:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x500}) 14:41:06 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:06 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x142, 0x0) fsmount(r1, 0x0, 0x8) 14:41:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x600}) 14:41:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:06 executing program 0: r0 = inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) fcntl$lock(r0, 0x21, &(0x7f0000000000)={0x4, 0x3, 0x7fffffff, 0xb7c, 0xffffffffffffffff}) 14:41:06 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x700}) 14:41:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 962.634291][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 962.634296][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:41:07 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:07 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:07 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x204ac3) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r2) 14:41:07 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r4, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vsock\x00', 0x10400, 0x0) ioctl$EVIOCGUNIQ(r8, 0x80404508, &(0x7f00000012c0)=""/114) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000000c0)={r9, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0)={r9, 0x10001}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140)={r10, 0x8}, &(0x7f0000001240)=0x8) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000000)={0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x9, 0x8}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x4) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1111, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r12, 0x8008ae9d, &(0x7f0000000240)=""/4096) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x3f00}) 14:41:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 962.993662][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:41:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x4000}) 14:41:07 executing program 0: inotify_init() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000780)="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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000100)={0x1, @multicast2, 0x4e22, 0x2, 'lc\x00', 0x18, 0x400, 0x26}, 0x2c) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f00000000c0)={0x0, 0xff, 0x3, [], &(0x7f0000000080)=0x2c}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000380)={"a3f59d1d009243a18e9718d7fd37b173020f314b022233d4e4e68d21e518eb2dbd7ad1d16a97c4b0c683dc8545417677cf26db03a8de002d1d08cd8e8e3d64b9d381805ed5627a430943a7ae3d74bb10ead64e6c4bd0eea0b092c42bcaaac7061f6f60b398c0e941313f5332b907a88b4cf6a8480eca646e2631343fd34900849d95f2960fe0e435e6e226d54639aeae0c1b75f4f55e26ab9e9f9dc3eb1396723cf196043fe19c607a59848493debd8f48010fc59d2fae2a6db8eeac846c26cccadcc46dcfa901623d3417df443b1ee4472a1769d668881e0fb4deb9186b390fc733730235fc7e718b351d60b12b5568c7156b6f097b1ecd2d7633cc72766ed8448b54196f5be67b2e566bede95b56983ae38363772ac24af2306bf5615e8036d8d612c277dd6137f6180da8aa2dfdb6121491c704f539790329251fd53c63502bd5eed93ecd454f496374e8e89621dd5425fd7295f77ccdad24fcfb600340eb33610a73b3e60113c3ba797e55cd9714d2a42aedc3079c0670255defad0f5d4fe8258f85ede1f326bafb69dc1ea6e4dfd1752c30b5d06d840acdff218a663fe0cf076de116979822e785efc57274fc676d393195f21cdb4c3c55beb3af01d6b738a16fe70463ca5104bd4aaa52f7f5e8921052d87f37c8b35fd94af8a46d71dfb6cd221edb00ae51ab62b95aaa3aecbdd9c00dd5aa7db39cef21b256ec6ed768e19d310da6983bf48af9ac1322b5ef319dd44558bd23bfb7908febafdbdfd4c6eb7770adfde4eb9000c4c2841636c4b5149b8d78260f2c3bb4e6bf521a6c83d36cb868dd0ef48999b36d07640652e0f227f1a7a5d1f678a5728f4e77dccdecc5d2f142fe04d8980b65c5fcfa32117643fa65ac0c96e7bae6f950dc5e9741fb558ea375948587b763894daaa23123872c75c4293864ed0f102f8789f819825fb76051d302932f1477c7b17c3c95457729b61d73b8b1043748b5abb0ba703a7b1bd7cdecc956db5d0c8b908778bb588d22aee1ea7db168d2f08339fc1ef3527b927d85a762b8646cae9586ae9132531b7dfa2cc2187c01ab4df14926a56d40ad28af6fc54cb647dd2df674a54635aafd206af063ce3d55c2a9ac78a531804882ba0e61411402bf85fdeba76f2febfac31cf003e147168502fa45de7ddbef4f458ce9889ec275a580b871d246717d6fd54ae8d72871582dc1b60fe73a7ada752b257d7c0a1700b772a6fcdd7c38d2336527a95554ba29c7228b3bd0ba5d58b3484f190c2724eaf71eb1fe06f9868c94f70d69206b798abe01bb8caf6c80df9473b302639d6705a93c5874a370728e3b60b4dd5ec468f90ffdc19bc4addc40d631aa8ac190279eb317fa032e2a0687074e4dbf01bbb0d1f3e1ce32e87f348818a776483e67d75fa48f8cecec151bc4d7314d08aab55c3225e8767b94a738f77133ea"}) r5 = gettid() tkill(r5, 0x1000000000015) r6 = gettid() tkill(r6, 0x1000000000015) r7 = syz_open_procfs(r6, &(0x7f00000001c0)='fdi~fo/\xc1\x00') preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r8 = socket$inet6(0xa, 0x2, 0x2d0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r8, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) write$binfmt_aout(r8, &(0x7f0000001780)={{0xb298e50a572e6505, 0xfffffffffffffffe, 0xcbb, 0x372, 0x3ac, 0x4, 0x1c5, 0x1}, "d2a4d75aff9036ce837c11efedde655cb89f0051c7646c854d90f69c0952fa29830b05af6366a58944444ba6e97dba1f3c1370dc66d482bb9ff6190f3138c81b1a9a0815f1f73e94994daada17d09cc5ccbd0a28644b56f5a9099a77743ec53e9cc72d5f7193b5a06736008ed32bf6fe63b4bbc3becd819993dc71f36190d41065131fe53ab903f9845d58fcab1ae9f90c756585b7addaf7cb268975233e70425db09ab079f3675198492aa5c53aafa482d0c8b6a6aeb3ad974a2723bfc401fabace9e55d0165e0336cc6fc364e9c28a7c919773ec66e013bf5a7079182125d04824d0", [[], [], [], []]}, 0x503) 14:41:07 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:07 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x281021, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0xff00}) 14:41:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:07 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:07 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x1000000}) 14:41:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:08 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10080, 0x0) write$P9_RWRITE(r2, &(0x7f0000000100)={0xb, 0x77, 0x1, 0xffffffffffffffff}, 0xb) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400404, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:08 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:10 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pipe2(&(0x7f0000000000), 0x800) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x2000000}) 14:41:10 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:10 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffffffffbff) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:10 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x1500, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x3000000}) 14:41:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:10 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:10 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340), 0x14d, 0x0) 14:41:10 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x7) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r2, r3}, &(0x7f0000000280)=""/250, 0x223, &(0x7f0000000580)={&(0x7f0000000080)={'sha256-generic\x00'}}) r4 = request_key(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='GPL\x00', 0x0) keyctl$link(0x8, r2, r4) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r5, r6}, &(0x7f0000000280)=""/250, 0x223, &(0x7f0000000580)={&(0x7f0000000080)={'sha256-generic\x00'}}) r7 = request_key(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='GPL\x00', 0x0) keyctl$link(0x8, r5, r7) r8 = add_key$user(&(0x7f00000000c0), &(0x7f0000000440)={'z\x00', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0001b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xfd82, r7) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r9, r8, r9}, &(0x7f0000000280)=""/250, 0x223, &(0x7f0000000580)={&(0x7f0000000080)={'sha256-generic\x00'}}) r10 = request_key(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='GPL\x00', 0x0) keyctl$link(0x8, r8, r10) r11 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r11, 0x4b31, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r11, 0xc0206416, &(0x7f0000000140)={0x6, 0xcb, 0x9, 0x0, 0x2, 0x4}) r12 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r10) keyctl$instantiate(0xc, r2, &(0x7f0000000040)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'security]eth1'}, 0x37, r12) 14:41:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x4000000}) 14:41:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:11 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:11 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$midi(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = dup(0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000180)={0xa, 0xa, 0x1ff, 0x5}, 0xa) fstatfs(r2, &(0x7f0000000080)=""/214) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x4) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x101100, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000240)={'bond_slave_1\x00', {0x2, 0x4e22, @loopback}}) ioctl$KDGETLED(r4, 0x4b31, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000000)={0xb, 0x101, 0x1, {0x1, 0x2, 0x8, 0x4}}) 14:41:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:11 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fcntl$dupfd(r0, 0x406, r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf294}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:11 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 966.794286][ C0] net_ratelimit: 22 callbacks suppressed [ 966.794295][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 966.794327][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 966.800028][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:41:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x5000000}) 14:41:11 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x1000a04, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000000)=0xfffffffffffffe4a) 14:41:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:11 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x6000000}) 14:41:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:11 executing program 4: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0xc00, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0x2ab) 14:41:11 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x340]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:11 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:11 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fcntl$dupfd(r0, 0x406, r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x7000000}) 14:41:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:11 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x8000000}) 14:41:12 executing program 0: r0 = inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) write(r0, &(0x7f0000000080)="f32f61b4f35d2ccde34b4201434c691c5d4adb651d67895d12c3ec8ca90fbd94aec18c411d7dff108dd4fddabe11922ce96709e2fc6e2ce892cd9a5b65baf10bd32e33a145dedbd92a7ebd5c1922d82cfc784891fd0b5b9985e2c6207635a0c9d08e5b0bcdc444fcda6e5e1ae7a3e6d80593de8cd2654fc2cd196777b365a2c961732468baa4f4db342211c5110bab7047e20cce75d3feedd6315e1a35c16f912778c99c15e59005bb8c38ff08cabd64326e849e62910f468080baf4bb07dc9e75f587acc75a39ce2b1fce60f66cb60d600ef84a4b9d310be99dd652d2d94cdf596d2da4c121bf25cc43a5c7d8f861", 0xef) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) vmsplice(r2, &(0x7f0000001600)=[{&(0x7f0000000180)="a657e7ef1e0e9edd62d59f5120b33fcd1a7fb691c79342180e27cfabb60df31e5ab450f960287d647872869e3b963f33c66db9559f5d16567348bfe816c954fe2071a3c12d3d7288f560e1ad199e552367be748c62c5e3a441", 0x59}, {&(0x7f0000000240)="a38223763d3dac4c57e7bfa8fb8bead0ac633f987245b0070fb2f7d4d45c1ef16649a9f03eaaa1666a0de6973dbeaff80d3c30f4e714fb881629a863a994ac66a677206e8fbadc390b4cfe6117461fb340481581476c9e510ee55885898134f38b2fec8750726083ee8bb80cc4ab3531dedae8ba90e8fd119b00d7b4fa8d13523a85bc4ab6b8fa6a9f1a2425013f201338fba4036991442abe1f98ab13db66acd854", 0xa2}, {&(0x7f0000000000)="92d88fef56bb8d0b09eb19505b99a0f83472fb7de6c06e9670b9f154dfa0b2a83a1e49d611a9932db6f90f3eadd4d2188a", 0x31}, {&(0x7f0000000380)="3553227451e2920db8c3d7b6857875f0332876938a2d46634fe6d76e4f2625bfa51fa775fd0307337903d7fc48ade037b9ba962d27c6d2d26fe5baec6adf13eec7c2819593114063fdd79d542051942cce8a62e8990c8d084a40d154ce0400dcd5e339b6253af732ef7daeaa58b64233382b08bbff4a0f10f898f2fa7213fd7234db5c2254babb221cbc127a402fe2ae56861fcc3f94b21621b19310e0b4108370321e795b960d34f7d3708764eeeecd31b0265b055a249fcbc1e0150c01c3118a585f6ac759396e4ce058011d38a7f5075f9c00a5f703bd6589042761de7e0a36157a910f11430676", 0xe9}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000300)="4dbace927651cbb227d3455180f2fcdadca8b1aaa7b2186fa548b650d09a021181646ff1222b22392e3d725efe3ddbdea77f92be", 0x34}, {&(0x7f0000001480)="cfee882a93f2ee4299463799cddee1f70ab7ced272be7f495feb28041436f5288f3ed05798a541e68d6632b6766db7369bed768dd431cfe909a7dc7d1e56c1f1d1a754a484d7afd12ddc16a328d718bad1990c3ba331cf02", 0x58}, {&(0x7f0000001500)="0793a71ae37de1e74d246e2478583b2ae2fb5942cf294e6e3dc64d87425a0ebf7b1b189fd56eece23892e54f505e96fb9b424cc0a2d16f4de5014418cee7fe5da78c0c16d7e0fb59bf0e795c882dcdfa3e015f22ea09bf73e1edbb2b316ad28a6c7f90f54383b2cfc45ed545e9c18fd0f8fc299204689ae4686fd572001dc79f2949aadaf26002f948332c03dd971e072529db907b8f7ec3d71da44eb50764c95ba6f501dfa4965070d77e244e346ca99fe3a5705ca31dd8dd860e", 0xbb}, {&(0x7f00000015c0)="22d254ae368d1710e661a4148ab85efeb8", 0x11}], 0x9, 0xa) 14:41:12 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0xfed0) [ 967.674325][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 967.680209][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 967.686090][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 967.691871][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:12 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x3f000000}) 14:41:12 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fcntl$dupfd(r0, 0x406, r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:12 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:12 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) finit_module(r0, &(0x7f0000000040)='[vmnet0\\cgroup\x00', 0x0) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") [ 968.074362][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 968.080213][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 968.086126][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:41:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x40000000}) 14:41:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:12 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:12 executing program 0: inotify_init() openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x210040, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x30, 0xffffffffffffffff, 0x18) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x200, 0xfbe}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000180), 0x100000000000001d, 0x1) 14:41:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0xfdfdffff}) 14:41:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:12 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:12 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0xff000000}) 14:41:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r2, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x3, 0x0, 0x6ae92f1d, r2}, &(0x7f0000000140)=0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0xfd2d) 14:41:13 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fcntl$dupfd(r0, 0x406, r1) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:13 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 968.701572][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:41:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:13 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000080)) inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0xfffffdfd}) 14:41:13 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x2, 0x4e6}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f00000000c0)=0x81) 14:41:13 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4500]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x100000000000000}) 14:41:13 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:13 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:13 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fcntl$dupfd(r0, 0x406, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x200000000000000}) 14:41:13 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x210000) 14:41:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x6, &(0x7f00000000c0)=""/111, &(0x7f0000000140)=0x5b) preadv(r1, &(0x7f0000000340), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 14:41:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x300000000000000}) 14:41:13 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7500]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x400000000000000}) 14:41:14 executing program 0: r0 = inotify_init() ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000200)={0x7, 0x1}) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000080)={{0x4, @addr=0x2}, 0x8, 0x4, 0x3}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x6d3d7926, 0x6}, 0xc) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x200200, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x8, 0x9, 0x6, 0x7fff, 0x0, 0x7fffffff, 0x20000, 0x2df8d42c0cbe5e90, 0x8, 0x481, 0x8, 0x6, 0xfffffffff5b4ebaa, 0x1ff, 0x3, 0xfffffffffffff001, 0x7a0, 0x40, 0x5, 0x900000000000, 0x5, 0x0, 0x8000, 0xfffffffffffffff8, 0x100000000, 0x7, 0x3, 0x0, 0x4, 0xa5, 0x80, 0x3, 0x8000, 0x6, 0x1f, 0x2848, 0x0, 0x6, 0x5, @perf_bp={&(0x7f0000000240), 0x8}, 0x2000, 0x9, 0x1, 0x1, 0x592, 0x9}, 0xffffffffffffffff, 0x11, r2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @remote}, 0x4, 0x4, 0x4, 0x2}}, 0x2e) r4 = socket$tipc(0x1e, 0x5, 0x0) dup(r4) preadv(r3, &(0x7f0000000340), 0x0, 0x0) 14:41:14 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:14 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000040)) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:14 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x500000000000000}) 14:41:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) inotify_init() r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0xf1be, 0x12f, 0x7, 0x40000001, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) 14:41:14 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x600000000000000}) 14:41:14 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='user\xc0/(keyring\x00', 0x0, r2) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:14 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x700000000000000}) 14:41:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x800000000000000}) 14:41:14 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:14 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) mq_timedreceive(r2, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:14 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/27) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x36c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b6100000463044001010000000000000000000001f6000000010000"], 0xcd, 0x0, &(0x7f0000000400)="d8289fdf1e28b00df75c979c625207049a410244dba0c00e032451e52682b90d4e4f4fa1f3532c5f2a57bceddce7f121e63c3e36693bb305de24f514039026f29290308ff044a34f03f839c396373f2bfaa25d1ce7302b2ce13808cd41c32588302ec5875a516a3e777a0fb8b21a2521c2250da6f476ca55f4e1c16a108adceaf4a700733eacf463831a3f7c50b19c81a362daaaeeb6c2dac586a09667457bae083181d5ba983e8f792c6f41c9a0e0e1f406f5edb67128b5f02b13c885ca4a44fb26a30000e8ffffff2278fbed"}) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x80800) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8001, 0x418000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000240)) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x3f00000000000000}) 14:41:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:15 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:15 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000040)=0xfffffe88) 14:41:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x4000000000000000}) 14:41:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:15 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) socket$inet6(0xa, 0x88000000000805, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) mq_timedreceive(r1, &(0x7f00000001c0)=""/87, 0x57, 0x20, &(0x7f0000000240)={0x0, 0x1c9c380}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:15 executing program 0: inotify_init() syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r0 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000200)) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2048801}, 0x10) preadv(r0, &(0x7f0000000340), 0x1, 0x0) r5 = syz_open_dev$midi(0x0, 0x0, 0x400000) ioctl$KDGETLED(r5, 0x4b31, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 14:41:15 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:15 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x3b0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x9, 0x4, 0x99, 0x0, 0x7}) 14:41:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 14:41:15 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:15 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0, 0x0, 0xff00000000000000}) 14:41:15 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) socket$inet6(0xa, 0x88000000000805, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:15 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x7ff) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/92, 0x5c) ioctl$KDGETLED(r1, 0x4b31, 0x0) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x698, 0x5, 0x7, 0x22}, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xe4bae8f0725bc8b0, 0x0) syz_open_pts(r3, 0x400122) sysfs$3(0x3) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:16 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:16 executing program 0: inotify_init() ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r0 = gettid() tkill(r0, 0x1000000000015) r1 = gettid() tkill(r1, 0x1000000000015) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000380)='c\x96\xb3c\xc3gr') bind$rxrpc(r3, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x18010004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x400, 0x70bd2a, 0x25dffbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x620dd9a8, 0xf8, 0x2, 0xfa4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004020}, 0x4c821) 14:41:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x101, 0x2b29627eecfa9b39, {0x0, 0xff, 0x4, 0xff}}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:16 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:16 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) socket$inet6(0xa, 0x88000000000805, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) [ 971.834290][ C1] net_ratelimit: 14 callbacks suppressed [ 971.834299][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 971.845894][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 971.851758][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 971.857587][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:16 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) getsockname$unix(r2, &(0x7f0000000240)=@abs, &(0x7f0000000300)=0x6e) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0xfb) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0\x00') ioctl$KDGETLED(r3, 0x4b31, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="f0c32abd7000fcdbdf250300000014000200080004000800000008000400000000003c000200080004000000000008000400ff03000008000b0002000000080006000600000008000900070000000800080005000020080009000a3500000800050003000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000800}, 0x8b38c1f1781768e9) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c010068", @ANYRES16=r5, @ANYBLOB="000828bd7000fedbdf25040000000800060081000000"], 0x1c}, 0x1, 0x0, 0x0, 0x415}, 0x4000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000080)=0x2, 0x8) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="00fb2f020168e586d4fb70e0000976a6f7ff2ca6d111dae4da07daec6909a2e388145908bd51a2bd5d9160e5b51ffd399d8adde2bfc237"], 0x2f, 0x1) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000000c0), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000140), 0x4) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:16 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:16 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f00000000c0)=0x18) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ftruncate(r3, 0x80000000) 14:41:16 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 972.234293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 972.240135][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 972.246041][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 972.251837][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 973.034311][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 973.034316][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:41:19 executing program 0: inotify_init() syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r0 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:19 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0xf, 0x0, 0xe0c, 0x70bd2b, 0xffffffff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x8000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800008000006ba70000000000000000000000005b51f7b59d781707ea772aeeee74fe1620", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x4, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x80) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000002c0)=r5) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffd7b) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000004c0)={0x14, 0x13, 0x1, {0x1, 0x4, 0x1}}, 0x14) prctl$PR_GET_CHILD_SUBREAPER(0x25) 14:41:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x21002, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:19 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) socket$inet6(0xa, 0x88000000000805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:19 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:19 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:19 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) pipe(&(0x7f0000000000)) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffcce, 0x0, 0x0}) 14:41:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:19 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = gettid() utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x800, 0x4}) tkill(r1, 0x1000000000015) r2 = syz_open_procfs(r1, &(0x7f0000000040)='smaps_rollup\x00') getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000100)=0xfffffffffffffd16) 14:41:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:19 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:19 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/46, 0x87}], 0x1, 0x0) 14:41:19 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x160700, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff0000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:19 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 14:41:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff0000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:19 executing program 0: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x40, "39d7f44ca7e2445e85209d1fbe81fad28ca630a1bf2946843c6f362ed60f4a7e", 0x2, 0x100, 0x7fffffff, 0x96a6, 0x8, 0x3, 0x9, 0x6}) inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00*\b\x93\xa9\x00'/20) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:19 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 977.194311][ C1] net_ratelimit: 21 callbacks suppressed [ 977.194320][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 977.194382][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 977.200083][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 977.205802][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:41:22 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x7fffffff, 0x400) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x1f, 0x200, 0x200, 0x8, 0xae14, 0x8, 0x2, 0x10000, 0x200, 0xfffffffffffffffa}, 0xb) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x388558325e6409be, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 14:41:22 executing program 3: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff0000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000700)='/dev/full\x00', 0x4000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000800)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x21}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000780)={0x1, 0x10, 0xfa00, {&(0x7f0000000740), r3}}, 0x18) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000006c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000080)="29cd4677ff22b377cb3c40e15859947d1ca4b3d39c6e59af66650784e5826ab3be246c68b2833d9eed65af23de43b609d1ae95bf08cc460d73e50c48042fbdf0bc41eba741182a", 0x47}, {&(0x7f0000000140)="dc6dab742d1cb8cc883228601962d255e14a6c2427e0e34d0558b5614a7a5acd5702d40e9ba0b6d72b75dea0c40db6669a0f1e538e21ed37f087c75e318776f57266024d0a4dd222dd7b52879da3110277297c5d", 0x54}, {&(0x7f00000001c0)="3524ed22c80faf698b38201f70f2539211f6ada818fdb198230f2faa183d1d66f94facb3e1a66f9794ce6eaacaa66fe09f841accff29d7d7ea9e65c1de9c83640a77fbbaa2b3fa0cff25533be548e7f4eec6df7a9bd0086587d2582cd5fb5e10b60000e6c60ed24b46a05863b7da0ebebb39c14e99f021fb5c278d", 0x7b}, {&(0x7f0000000240)="0a12e9fb0f26f3c5a97f6c08a03116dfa058b8118058525383461a8d6ce738f2f540dde10bb3e2ad1746a28b5884866d49760b248fbf2a7e959392edc2ea984e3b4bc364708eeae9ab6fe87dc51affd22868bf1624a56cf158b16f95ca2bda723a09c531d0501c117b8513b2d19f2f2032ea755bc2d40126cfcac5ed5ad57e2992644f485e2c579b83ecc0b296e447a6bdf77cc9de3f56082ae2fc2a432355e4deacb309ae188581240fa1a4791a5143a6ad67c511b8bb1c15ffe93d6005d459273a8650cfd7137790864453c3e05ecb7d675b80d9abccba877f30f531a7a0d558a00c8893360c656b830a24b8c52321", 0xf0}, {&(0x7f0000000340)="976c6ae16339095d4ee71ee817b25729e65e1f967890441f1852c1f919676aafb30e5661d47d3cbc8d9d79885da5cb744fe06086e7ffd3cafa700ba7933c860632deec145c47a64c25df176ccd9717bd8323b173a14ad1d473461c7e156bdfff9701dee8994f10776c634884b3904dd428c9a7e30adfbd6192740ee1e344e99f853a9c97298561915cb6015d20dc74d51d9cdbfe5f2d23a63398cf039ae15eec8170be46b96dd8cd0a1ebb0b28890afdd47f3f89d062f739fffe51bef69ab5d728e84fdc92388baab1c2cda97230dd9eef8c70e943920a71503fad0f22", 0xdd}, {&(0x7f0000000440)="02a35674b68892fd6dd021414e46b38b49a2a2bb7c2412b7", 0x18}, {&(0x7f0000000480)="9af4676996ba31ac33bdfd8f9339cfd1034187f52a894b4d1151fbcdd7ccf9b2c458f751db43b35e496d4f7be284d9305e7d7d71e2aa6db10a5ce07d6210c882c26f51939153ca7b308f4d87a52326450605a3f2860619a4fae7a88e47a58896f27a8c53507ed1bda2959da6f96159fa0c892855db0ebdf4a49119bb18179e7a27250b485f55811bfb6651f94acd7aad01d62422caaa381c49af7028eceae13c6f", 0xa1}, {&(0x7f0000000540)="9864dcc75993f3bf11681e301e3ee6a4c35d0f5aa7f129565693251e8e34914921217aec30e282d28c032ad9c4f9ff60e7a779046157174b3d7b51f2eddb5da63861c38e97b90d57f8cc26bed6a1867b92762efaf1f8a34844945117c7fe45c27c6988f8aae55e203cfa74698679a01a7344d2b62d58cd9f330c542114a9efefba3c4107692650e40b38d1cd0beb937ea2aa1ac6d5d9f393cea56537fbdce4d9f2bc563a6b91db117293b868571a0f5e1c248ad6e09c1257ac5de84a6602e0818af271fa0734f005dd2ec371ada4d2b63aae9e673533d9bcbe4b23521473f4d708e9651ec922ced5", 0xe8}], 0x8, 0x0, 0x0, 0x4000}, 0x24008006) 14:41:22 executing program 0: inotify_init() r0 = socket$inet6(0xa, 0x88000000000805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8006000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x80, r2, 0x600, 0x70bd25, 0x517a5ccf, {}, [@TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x2004c014) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r3 = fcntl$getown(r0, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000040)) r5 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r5, 0x4b31, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000000)=0x4041010) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r7 = socket$inet(0x2, 0x2, 0x5) r8 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r8, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) accept$inet6(r8, &(0x7f00000001c0), &(0x7f0000000240)=0x1c) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) fsetxattr$trusted_overlay_opaque(r6, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) [ 978.074304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 978.080135][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 978.086145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 978.091949][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff0000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 978.118322][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:41:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:22 executing program 3: socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff0000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:22 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x3c9681, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/156, 0x20000, 0x1000, 0x5}, 0x18) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)={r5, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x10000, 0x9}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r6, 0xffffffffffffffff}, 0x8) 14:41:22 executing program 3: socket$inet6(0xa, 0x88000000000805, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:22 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x200) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) dup(r0) ioctl$KDGETLED(r0, 0x4b31, 0x0) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x80, 0x0, 0x7}, 0x2}}, 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x105000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000140)={0x0, 0x0, 0x0}) 14:41:22 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 978.438195][T23413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 978.474297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 978.480169][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff0000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:23 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x6, 0x1b, 0x1}, 0x7) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:23 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x101000) ioctl$KDGETLED(r0, 0x4b31, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xffffffffffffff8b, 0x0, 0x0}) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x302) 14:41:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000040)="44fba83f2cbd98da7035ecf698508bef8d53d137df09da508f57e49aadf609b224deb7600cafbe18220f840b5173682bdea1497916ab8b1842b11b6593b29388d558ef8775", 0x45) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}]}, 0x140}}, 0x0) 14:41:23 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:23 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:23 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:23 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x100000000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0) 14:41:23 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x802001, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f0000000140)={0xb7, 0x0}) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x3, 0x361c24b5, 0x22, 0xffffffff, 0x7f, 0x8, 0x1, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x800, 0xffffffffffffca0b, 0x1, 0x41f6}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={r3, 0xe6, "afa673d51d2940f5dba530eed7c33bb76af3113e51f076fa6fa3a3a9c57d557f8d54308237649caffdcde07add314b35d0e3b5eb80dddd5f1e44c998d0c88c8362e13efa8739f6fc3c0fc58bd0928f6499559e4b6df865e1a4ae79969dd4fadd72043598ee17424866a3ea2229f88795c533c4f555d039d7f4ec9d5815ef9e4cd5de989553f6eaa02e51285820221e2a329f2274b82f3a3bf51096bafb1bf180b5277d1328ec6419ed4c7c23db368d2225b14b2c01ab778d96eca4d87e8e1815fd67d487720b08d9093663e716fc9b85473e99028abb148bada7e7c70e3c3d2451f12b5d5e29"}, &(0x7f0000000180)=0xee) 14:41:23 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:23 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:23 executing program 0: inotify_init() r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000002c0)={0x30, 0x1e, &(0x7f0000000380)="44fb0d47e1faad7f18031bbc7200fb074edfa64256f4ae5e2ff59259357b7ab8cebcb0ac1247fb3bb8a9c9f6ef0eee65bfbe350289e04868f6937a9f092512c4e2f2912cdfae40116ffbdd832219df06a03af9dcd7559b9397783921481998297c8525de20a0c6c088e99d6d995cd27300b3de3cbe9b91d36462c243d70f30bcbfdcc10aed066f137282b98c14a27cf52c217ffb7e4f2ab102c8820d819e03073b9e581a7ccc191fb191c6f61b35daf5d68e7b40ded0c4b625c7629ea1b71344334a55a96ef39168496f6b39737052590419cdb28125eb0b6ed372565f487b73c3", {0x80000001, 0x80000001, 0x56595559, 0x3, 0x6, 0x20, 0x3, 0x4}}) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000480)="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", 0x181, 0x10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x1}, 0x1c) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/164, 0xa4}, {&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000000)=""/51, 0x33}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) [ 979.323154][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:41:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r4, 0x4b31, 0x0) ioctl$VIDIOC_RESERVED(r4, 0x5601, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r5, 0x4b31, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x7, 0x3, 0xffffffff, 0x800, 0xb818, 0x0, 0xfffffffffffffffa, 0x0, 0x9, 0x6d, 0x100, 0x5, 0xffffffffffff7baa, 0x6, 0x6, 0x6], 0xd000, 0x1}) 14:41:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) 14:41:24 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) 14:41:24 executing program 4: madvise(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:41:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x4, 0x54e}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={r3, 0x3ff, 0xcc, "5c3c98a6f348cba6b13347ca790dca7bf8a6ea960cd02ad1d6817917e73e46ba25bb54f74800398207847ac0419f0e289becafd7fb7d9ba8db4bb70ceb982339c82fb2b09d85ee3630f642fdba096b834b11fce8cccf335c9aef519ce76bad77a5b1b5c451a979d6a28f87c13bcd30d7a5aee0c1697c3bd260011250b7a09b9b605b179bc59878ed83224ce0fbd3584bc72862f0bf104fb3ebf8fd836bc962bc3014b09a0263befb1f08d3f006d4fc420e7095e62ecdbd1a486bc2a4a3407317a505280bb9c89e6ed18a6f4c"}, 0xd4) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0x5, 0x100, 0xfffffffffffffeff, 0x80000, 0x0, 0xee, 0x30a0, 0x4, 0xff, 0x7, 0x5, 0x1e, 0x0, 0xffffffffffffff81, 0x0, 0xd8, 0x6, 0x401, 0xbef5, 0x401, 0x8, 0xfffffffffffffffc, 0x200028, 0x5, 0xef, 0x0, 0x40, 0x2, 0x5, 0x0, 0x7, 0x6000000000000, 0x7, 0x56d, 0x1ff, 0x4, 0x0, 0x5, 0x1, @perf_config_ext={0x1, 0x1}, 0x20, 0xb4, 0xfffffffffffffffc, 0x8, 0x3619, 0x9, 0x4}, r4, 0x4, 0xffffffffffffffff, 0x4) 14:41:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) 14:41:24 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:24 executing program 0: inotify_init() openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0xe080, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0xffffffffffffff1a) write(r1, &(0x7f0000000080)="618b12f4e5e76a129bc4ffee4d3f054f6fb9a875bfb2e220374d7fd8341acda995d4b97f1170db5150cdb22105ad13a5baaa1766f5fa08686ff6be9488286668060ab947547926c03520b88470e9c2f7bf4fecc84e801e0f040633b82d30a1e83e7e50cb78655f210ee2099430ec33ae11871d8d465f4225284e24ebc36a626087f2cbdfb0c871b176b09c9f078813661a49b35810223221ecd7160be54005c632f07ac815ef214a27e705bf74fe54300e4bb10b094425d419fd1ec1415cb855a757c128517b814febb162b7b96c060dedb09cbd7220e9ba71f43ce5b0d0df5c673cfa132a51c08b3c0d31dca8746847cb", 0xf1) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x4000) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0xfffffffffffffeed) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r2, r0, 0x20, 0xa, &(0x7f0000000180)="a50907b37962128f98a8", 0x7, 0xffffffff, 0x1, 0x7fff, 0x81, 0x1, 0x5, 'syz1\x00'}) [ 979.969132][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:41:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:24 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:24 executing program 0: inotify_init() iopl(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x101, 0x7, 0x80000000, 0x0, 0xa6}, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, 0x0) write$P9_RWRITE(r3, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ptrace$setopts(0x7abb990919170921, 0x0, 0x10001, 0x111) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000a00)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) setpriority(0x0, r4, 0x100) read(r2, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x10000, 0x6}, {0xffffffff00000000}]}, 0x14, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f00000002c0)='proc\x00']) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={{0x0, 0x0, @reserved="163de487aa6b4f32f63498a8e85518f0ddf86ed548db46b85cfaa1fb83970383"}}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/201, 0x48}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f00000007c0)=""/134, 0x321}, {&(0x7f0000000140)=""/61, 0xfffffee7}, {&(0x7f00000001c0)=""/40, 0x28}], 0x5, 0x0) 14:41:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000), 0xc) 14:41:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x5) dup3(r1, r2, 0x0) r4 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r4, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={[], 0x4, 0x81, 0x3, 0x3, 0x1, r5}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1c0, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xec, 0x10, 0xb, 0x400, 0x70bd2d, 0x25dfdbfb, {0x3, 0x0, 0x1}, [@generic="32896d583c41273819396cd7677c781189c23577b845423f27641cae5cb7bcbae5e57e650eee9b26a778a047b8dfaedf808b8aed783f8e284a", @generic="bbd3444d2e27e6133e8ddc56a8d7ecee6581ba11", @generic="3e04336bf07dc16f95d25479f25d865f762a045e9b5a8169d95d2316d4c36eab596773c33f49a9f04feb6f26e908a76b5f397d34bba244074c53320b5748fd3d8d6884119310f222ed21c253e30fcd3f22021d40f483fa9ddfc9e078236c2913d207ed223d67575ee94a1688e75afb2aee841864ae8879e6f9ccf6071eb93fd4ab2caf0ded8bd68133"]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) 14:41:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002559b70035"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000020000008b04"]) 14:41:24 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000), 0xc) 14:41:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') dup2(r0, r0) syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x3, 0x200) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x1322, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x24}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6e042}, 0x40000) syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x81, 0x400) ioctl$KDGETLED(r1, 0x4b31, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x1) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000380)={0x30, 0x4, 0x0, {0x0, 0x40, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) ioctl$VT_ACTIVATE(r1, 0x5606, 0x400) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/176}, {&(0x7f00000002c0)=""/25}, {&(0x7f0000000300)=""/56, 0x1e}], 0x100000000000009e, 0x0) 14:41:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000), 0xc) 14:41:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb9, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup2(r1, r0) 14:41:25 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x140000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000800)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x21}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1ff, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0xdff}}}, 0x118) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f00000002c0)=0x3) 14:41:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:25 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340), 0x2eb, 0x0) 14:41:25 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000240)=0x800) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x492, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, 'Uchain\x00'}) r1 = add_key$user(&(0x7f0000000280)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000440)={r1, r0}, &(0x7f0000000600)=""/233, 0xe9, &(0x7f00000004c0)={&(0x7f0000000480)={'sha384-ce\x00'}, &(0x7f0000000700)="fb93b58dd6d8cd9029b740a90d11b45784287777289ba3652c5c00810f3fd8f952a933dfd9979fb734d408734a3d7c781d1b19023871a3dcf357d63a711c6b6333", 0x41}) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r0, r0}, &(0x7f0000000140)=""/112, 0x70, &(0x7f0000000580)={&(0x7f0000000500)={'sha3-384\x00'}}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f, 0xc1) 14:41:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:25 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[]}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 14:41:25 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x84) write$capi20(r1, &(0x7f0000000180)={0x10, 0x100000001, 0x82, 0x83, 0x7fffffff, 0x1}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @dev}, &(0x7f0000000080)=0xc) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:25 executing program 0: inotify_init() r0 = getpgrp(0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) r1 = syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) memfd_create(&(0x7f0000000000)='GPL0+wlan0\x00', 0x4) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) 14:41:25 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 981.450590][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:41:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb9, 0x200800000008042) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 14:41:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x400002) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x2, 0x9}, {0x4, 0xfffffffffffffff8}, 0x5, 0x1, 0x5}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0xffffff9c, 0x3) [ 981.680592][T24871] usb usb3: usbfs: process 24871 (syz-executor.3) did not claim interface 0 before use 14:41:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x800, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000003c0)=""/50) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8040002}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x134, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdcc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff7180}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfbfe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd056}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8) r4 = shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x4000) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000400)=""/111, &(0x7f0000000480)=0x6f) inotify_init() r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ffo/\'\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f00000002c0)) 14:41:26 executing program 4: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="0bf736a9b4d2d9a1122fbabe6657c12f84ede6416768da5855fe3b7e1f2a17868da780cb", 0x24}], 0x1, &(0x7f0000000640)=[@op={0x18}], 0x18}], 0x1, 0x28008804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x263, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x597c, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x0, 0x0, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x100c0040) socket$packet(0x11, 0x2, 0x300) sendto$inet6(0xffffffffffffffff, &(0x7f0000bb5000)="ce", 0x1, 0xc840, 0x0, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = syz_open_procfs(r5, &(0x7f00000006c0)='net/netfilter\x00') writev(r6, 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000140)=@can={0x1d, r3}, 0x80, &(0x7f0000000040)}}], 0x1, 0x0) 14:41:26 executing program 3: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)}], 0x3}}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="eabe9f303b222957eecbc62428a82d2759621c4e25aca1877c7e5255f910c28f5e87a648b9546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39ac079b906da58a5d1ab04e9d752a92806db0c854", @ANYBLOB="0a1da9ee18cff6bc6a83095a16d8e35857b4bc2097af31ac7986a65cad647484f90c9fd46fef259ad171921ffcec605b1e"], 0x0, 0x7d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 981.903650][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:41:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000700)=""/100, 0x64}], 0x1, 0x0) [ 982.055768][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:41:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) r1 = gettid() tkill(r1, 0x1000000000015) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000380)={0x0, 0x1, 0x80, &(0x7f0000000340)=0x800}) r3 = gettid() tkill(r3, 0x1000000000015) sched_getparam(r3, &(0x7f00000000c0)) ptrace$pokeuser(0x6, r1, 0x6, 0x100000001) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) getresgid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) fchown(r0, r5, r6) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:26 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'filter\x00\x1d\x00\x00\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\xb0\xab\x94-\x00', 0x0, 0x3, 0x66, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/102}, &(0x7f00000001c0)=0x78) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 14:41:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4500000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 982.234362][ C1] net_ratelimit: 17 callbacks suppressed [ 982.234372][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 982.245871][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 982.251705][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 982.257521][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x492, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', 0x0, 'Uchain\x00'}) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r0, r0}, &(0x7f0000000140)=""/112, 0x70, &(0x7f0000000580)={&(0x7f0000000500)={'sha3-384\x00'}}) 14:41:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 14:41:26 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/46, 0x2e}], 0x100000000000054e, 0x20) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 14:41:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:27 executing program 3: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) accept4(0xffffffffffffffff, &(0x7f0000000440)=@ipx, &(0x7f0000000100)=0xfffffffffffffe3c, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc400) socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r1, r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) [ 982.634319][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 982.640206][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 982.646143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 982.651960][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 983.434340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 983.434349][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:41:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000080)={0x2, 0x0, 0x300e, 0x6, 0x52b3, {0x4, 0x1}, 0x1}) 14:41:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7500000000000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:29 executing program 0: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x1c9) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) flock(r2, 0x4) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0xc, 0x0, @ib={0x1b, 0x6, 0xdb, {"a3fdfd5f3d77fc86a30dea0353fb0887"}, 0x2dcbdc16, 0x1, 0xd3a}}}, 0x90) inotify_init() r3 = syz_open_procfs(0x0, &(0x7f0000000080)='chi\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r4, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x80000) 14:41:29 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 14:41:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:29 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb9, 0x200800000008042) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 14:41:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setreuid(0x0, r1) r2 = shmget$private(0x0, 0x2000, 0x1800, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) 14:41:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:29 executing program 4: socket$packet(0x11, 0x0, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) 14:41:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x04\x00\x00\x00\x00\x00\a', 0x10000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 14:41:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002559b70035"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000020000008a04"]) 14:41:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:30 executing program 0: inotify_init() r0 = gettid() tkill(r0, 0x1000000000015) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='\x1a\xcd\x8f\xa0\xc8\x84_T\x0e9\xc9n~\\\xd9X\r\xda\xf8k,\xe4\xb0\x92S\xf41\x0f') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x4c}}, 0x0) 14:41:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002559b70035"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000020000008904"]) 14:41:30 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0xffffffffffffff1d, 0x0, 0x0}) 14:41:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb9, 0x200800000008042) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 14:41:30 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffefffffffffffa}, 0x0, 0x8) r0 = gettid() perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0xfffffffbfffffffe, &(0x7f0000000240)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 14:41:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000004c0)={{0x0, 0x0, @identifier="1ff7018225efce5dd6ef8a4d6409d4d7"}, 0x1000, [], "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"}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000440)={[{0x7, 0x1ff, 0x7, 0x3, 0x7, 0xd7d, 0x1000, 0x20a, 0x4, 0x2, 0x9, 0x5e15, 0x2}, {0x6, 0x3f, 0x100000001, 0x7ff, 0x7, 0x0, 0x3, 0x4, 0xfffffffffffffffd, 0x401, 0x10001, 0x4, 0x6}, {0xb31, 0x7fffffff, 0x8, 0x7, 0xa0d, 0x7, 0xfffffffffffffff7, 0xc000000000, 0x0, 0x8, 0xffff, 0x9b5, 0x100000001}], 0x5}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x88c41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r6, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r7 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r7, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r8 = dup2(r6, r7) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r8, 0xc008551a, &(0x7f0000000000)={0x5aac, 0x1c, [0x5, 0x7, 0x10001, 0x3, 0x401, 0xc0000000000, 0x80000000]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000340)) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000080)={0x1, 0x3, 0x1000, 0xcf, &(0x7f0000000140)="cde2f7f72f342cfa2377d52a350adabfa24e4f698281a20b6829dd501e2c139be5efdb004298a6a2e1ff8bf19b0871d12655ebd9c741665cf85ce45c4085e13c184507e799cc89fc832db41054b2f3d5a1d6cacbd006d7f8f8d6e7a9ba605c8fd20e6d04b70f08137d8fe0e10531f2f6082a96d75cd98105c024cd0b26031d9a2fa3b322743e0bf588e2c79adb1fbbba7f9e05096c1de27c17dd7d05171c607fa86fadfa3c2dae76042b260c6005c8e68b4f888159ea3ab32c43d11f3554c12fb226b5606f9658244c71592e006e6d", 0xf2, 0x0, &(0x7f0000000240)="6bc3b47431b3fee59e276dbcb6f4c23ff5ecef86841581253cc5f6a1d7ad954424d2476f27c32c605888f43299201c168aebd09d18a825c87ae755b0232473ec3af7b4f88dfff5d8b0a7a7bfca681fecc83fb2f793181e70e5b36d1b96b5d1bc6fbdb5f819e5dfc2b8b76e5e86c9bf338cf178612cc5dc557345b752bae5140e8a1e439112ff67c4c98077a108cc7b84a3c91887d9a5ec3851b29d11970f455dc4610d2f415192110562a7190600f80431f1b38bea5f78f58abec9150355862ce12089eb7702b441a77397be5de77059efcfb91a585ad0881b0c3cf2740f8a521808e9d56ec1fe5fd3e543642ab2b0fc2e18"}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 986.438716][T26014] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #0 [ 987.594334][ C1] net_ratelimit: 20 callbacks suppressed [ 987.594343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 987.594965][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 987.600082][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 987.605843][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 988.474379][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 988.480223][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 988.486415][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 988.492199][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 988.874328][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 988.880244][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:33 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:33 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb9, 0x200800000008042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 14:41:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x2}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:33 executing program 3: get_thread_area(0x0) socket(0x40000000015, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, 0x0, @dev}, 0x1c) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000d) 14:41:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x480, 0x0) r1 = syz_open_dev$midi(0x0, 0xfffffffffffffffd, 0x80000) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000140)) ioctl$KDGETLED(r1, 0x4b31, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x8000, 0x400001) renameat(r4, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) ioctl$TIOCSIG(r1, 0x40045436, 0xb) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x0, 0x0, 0x0}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2, 0x0) 14:41:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x5f, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:41:33 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={r3, &(0x7f0000000080)=""/230}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x3}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0xff1f, 0x0, 0x0}) 14:41:33 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x4}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:33 executing program 0: inotify_init() r0 = getpgid(0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x6b7bee8823a75a48, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r2 = gettid() tkill(r2, 0x1000000000015) ioprio_get$pid(0x92b753ff7cb11e1c, r0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fdinfo/3\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x40, 0x5, 0xff, 0x8, 0x40}) 14:41:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0}) 14:41:34 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fsync(r3) 14:41:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:34 executing program 3: get_thread_area(0x0) socket(0x40000000015, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, 0x0, @dev}, 0x1c) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000d) 14:41:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x5}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) 14:41:34 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb9, 0x200800000008042) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 14:41:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 990.079505][T26494] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #2 14:41:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x6}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:34 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000140)=""/214) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 990.396507][T26613] QAT: Invalid ioctl [ 990.431296][T26613] QAT: Invalid ioctl [ 992.644296][ C1] net_ratelimit: 17 callbacks suppressed [ 992.644305][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 992.656016][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 992.661829][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 992.667716][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:37 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') sendmmsg$alg(r0, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="bdedf886427eaa326df981edd0661a1f6e37395061d699a81777a9a26431c9b4feedfd3802938f9ac59c62cac492c67707749e1639dd6972a7bc841e645fdc437ed772247eeab92b81cd73e1f5d3295eef13f26ee2ff4dc6e66ff8412f132ce9ff7f4a7d00b173c444b9c5aefd9a2e4eafcaeb5fde354a3cc62f16dbea9cea945b85bdf67f354e47a43df1d1d4afde665273719e73920893681dd4bc590658224ae6ec179aaf39b481e1ecce450fc342a4567d57ab771ad4", 0xb8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x100, 0x117, 0x2, 0xec, "a2419e6d6403467591f8750bed80d01c3a2e38b7fa56058de9eb4e97b9e802af1d0aec8c12ff0a5ed7f7cd0df35e9743db330a0d71ea5588686c07dca4ef2a0dfe8ff312d4148136de8c17e9a57c5271d6994cd3c358024120ea85a7d0202f268d0217ef9f107e08c0906d3da65be20f0b6dcc9bada0e06cd6c7726dcbc263e281c6ded6a6f9c7d00a8f9b6d26fbe0e2b2da7e639d02f73c963f81693e6814e237d04460485a023af527146173d2030b1b7f2d732307e5a8591b9fbf692db8b2c53c5d08eb276e3c8e3338db4fb8a9a958807fe8d88c754b00c5305333558e5befaa05c4832f68c88fab9ea7"}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x130, 0x10}], 0x1, 0x40805) inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20001, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x21c, r3, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100010}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe42b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0xfd4b, 0x2, 0x80}, @TIPC_NLA_NET_NODEID={0xffffffffffffff4e, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7301}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffb984d0bd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x177}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21e7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0xc5bb275ed82dd044}, 0x4) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:37 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x7}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x1, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13b, 0x3}}, 0x20) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000180)) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)) 14:41:37 executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r0 = getpid() accept(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000000)=0x80) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) write$cgroup_subtree(r3, 0x0, 0x0) fsetxattr$security_smack_entry(r3, &(0x7f0000000180)='security.SMACK64MMAP\x00', &(0x7f00000001c0)='em0md5sum\x00', 0xa, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14:41:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:37 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x45}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x79, 0x0, 0x0}) [ 993.030862][T26726] picdev_read: 222 callbacks suppressed [ 993.030869][T26726] kvm: pic: non byte read [ 993.034317][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 993.046631][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 993.052473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 993.058310][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 993.075520][T26726] kvm: pic: non byte read 14:41:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) [ 993.123725][T26726] kvm: pic: non byte read [ 993.192433][T26726] kvm: pic: non byte read 14:41:37 executing program 0: inotify_init() r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000280)=""/250, 0x223, &(0x7f0000000580)={&(0x7f0000000080)={'sha256-generic\x00'}}) r3 = request_key(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='GPL\x00', 0x0) keyctl$link(0x8, r1, r3) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ubi_ctrl\x00', 0x2000, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000005c0)={0x1, 0x7, {0x57, 0x2, 0xfe, {0x5f1, 0x9}, {0x6, 0x5}, @const={0x1000, {0x4800, 0x0, 0x57c, 0xffffffff}}}, {0x56, 0x7, 0x8000, {0x1ff, 0x3}, {0x5, 0x1f}, @rumble={0x40, 0x80000001}}}) r5 = request_key(0x0, &(0x7f0000000500)={'syz', 0x1}, &(0x7f00000004c0)='mime_type[)\x00', 0xfffffffffffffffb) keyctl$link(0x8, r0, r5) r6 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="fd82bf1a6647", 0x6, 0xfffffffffffffffd) r7 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r7, 0x4b31, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r9, r8, r9}, &(0x7f0000000280)=""/250, 0x223, &(0x7f0000000580)={&(0x7f0000000080)={'sha256-generic\x00'}}) r10 = request_key(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='GPL\x00', 0x0) keyctl$link(0x8, r8, r10) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000480)={0xfffffffffffffff7}, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r6, r10}, &(0x7f0000000240)=""/209, 0xd1, &(0x7f0000000180)={&(0x7f0000000140)={'streebog256-generic\x00'}, &(0x7f0000000380)="d0b93c5043ef5afb50cc31cce3733a4b0781e11721eaccd6fe60be98aeea357d15a3f7c1b50acc50d7b0e11c5b6606b1ea6e201c2e46ed9c4a77018a925196657e4cb4f5629c9d1edafce9ca8f3dc313f6cffaa9b4bc27ed88cec7e9221465af676a1c2c9710eb4d460cdf4b41c42216e248613fa32fa09aec4450c8c4497c1a501a9dc752592ab9f46d31129742543b35505a799bb1e3efff5de42d304cc325537f8c1bed5ebbbe7e65de3e0a4c87a0fe4164db07292fce6c", 0xb9}) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) [ 993.237590][T26726] kvm: pic: non byte read 14:41:37 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x2, 0x80000000, 0x3, 0x0, 0x1, 0x5, 0xd2}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 993.277792][T26726] kvm: pic: non byte read [ 993.296914][T26726] kvm: pic: non byte read 14:41:37 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x60}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 993.323809][T26726] kvm: pic: non byte read [ 993.343482][T26726] kvm: pic: non byte read 14:41:37 executing program 4: ioctl(0xffffffffffffffff, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 993.377211][T26726] kvm: pic: non byte read 14:41:37 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000000), 0x10000000000002e8, 0x0) 14:41:38 executing program 3: r0 = memfd_create(&(0x7f0000000000)='-\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$addseals(r1, 0x409, 0x0) 14:41:38 executing program 4: ioctl(0xffffffffffffffff, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:38 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x5, 0x3, 0xa, &(0x7f0000ffb000/0x4000)=nil, 0x4}) 14:41:38 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x75}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 993.834315][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 993.834350][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:41:38 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x300}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:38 executing program 4: ioctl(0xffffffffffffffff, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:38 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=r1) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x492, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r0, r0}, &(0x7f0000000140)=""/112, 0x70, &(0x7f0000000580)={&(0x7f0000000500)={'sha3-384\x00'}}) 14:41:38 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:38 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x340}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00\x13\xc2\xf9\x9b2=\xcf\xcc%\xe7\x8ct\x14\xd9\xf0\xb0En\f=6\xcc\x83\xbc\xb84}4Y\xf6}\x10\xa7\xea\xb2\x13\x15b\xfa0%\x85\xf9&\x95\xc5=lU\xa1m\xaa!Qx\x02J\x97\x92\xc6U\a!o\xde\x15:\xe9^9\x7f8\xb0tN\xa6\xd9$u\x8f\xe01\xa7\xef\xd3\'\x86\x16\x1c\xbc\xf5\xec\x9e\xc6\xa6\x831\x05T_Q\xf9\xe1\xcbG\xdemy\xf3\xe4\xae[\x8e\x9dX+\xd3\x82\a\x81l\xff\x04Y\xb4V\x8e\fWq{\x9e<\xa2\xea\xe1\v\x04\x05\xffu-\xe1-\x19pPU\x88Z\x91i\x11\x87\x81i24\xd0\x10\xd3\x98\x16\xf8=\xdc\xeb\x8a\xac\xaa\x03gr\x7f!hi\xf0,}.A\x1c\xa0k\x96\xbe\xfa$\xbf\x05\xa8\x8e\x90N\xf1\x81') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=r1, 0x12) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xac, 0x0, &(0x7f0000000780)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:41:38 executing program 0: r0 = inotify_init() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000000c0)={0x2, "3f7f"}, 0x3) sync_file_range(r1, 0x9, 0x5a6, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 14:41:38 executing program 2: ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) r0 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 14:41:38 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:38 executing program 0: inotify_init() getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000080)=""/56, &(0x7f00000000c0)=0x38) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x101000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0xb1de, 0x8001}}, 0x28) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:38 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x500}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:39 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:39 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa}, 0x20) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 14:41:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x00\x00\x00G\xd6rb', 0x0, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:39 executing program 0: inotify_init() r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x800000004e21, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340), 0x0, 0x0) 14:41:39 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x600}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, [0x0, 0x0, 0x0, 0x0, 0x4000]}) 14:41:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x10e, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) 14:41:39 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x700}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:39 executing program 0: inotify_init() r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080)="010ec75267a347e949daebccbe3f5c9505ea70e7f1dea6d86f79988d9de9ab3b171a88388f761fec3bdc41937b0cd61f53bc240cac1758a129c8299bb10c596591cecf134b3230953c7f88102d3357dca3a17bca7395c463c5ae4b3632d7d24ad6c68963f526c0b7b3f5759e8f6b1a168484be22e43e43779ebe3ec9835666590b367ae498b7cd40e9959bfc2f1bffdfb1dee4cc3a481d770a2aea38f6c399228547c4202945ae57871c50a7c363516c717ec2e626d0314b8058f5e7ba33df29bc94b2881e51ddb415c1a60050a4fa3e6de730f0d2c4bf26d8", &(0x7f0000000240)=""/190}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="663c15b688af3f619f2709386cae3e40561317fccab29f0aae67517e25e1d35996bab500e2933193f69f6de0c9c99125a9bc4118e2c5a82a52", 0x39}], 0x1}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="a4ab12f728db4b2b4d2f2fba4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e56476dd2c8cb575a0fad7e0b6f6355077e72904a4153389ea6ccd595d94ee538bc7bf15b304003d1048ac70caa5064492916d98251883c182f2ec07ed91d53e745a1b28530915018508b8d9d2e61860cf64cf10f6aeee77bfa0a8b59b471db757c2688031c4c9aed23aa465965f1b7ea71edcd4e5535300574d16539766ddfaf61160d7c0a9b82b0dc6fc2483bd3859df044603d030c6c7e5756a8fc1b170258", 0xf8}], 0x100000000000010b, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:41:39 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:39 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x2000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:39 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$void(r2, 0x5450) 14:41:39 executing program 2: r0 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = dup3(0xffffffffffffffff, r0, 0x80000) write$ppp(r1, &(0x7f0000000080), 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:39 executing program 3: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)}], 0x3}}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="eabe9f303b222957eecbc62428a82d2759621c4e25aca1877c7e5255f910c28f5e87a648b9546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39ac079b906da58a5d1ab04e9d752a9280", @ANYBLOB="0a1da9ee18cff6bc6a83095a16d8e35857b4bc2097af31ac7986a65cad647484f90c9fd46fef259ad171921ffcec605b1e5398c51a4bd95b"], 0x0, 0x80}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:41:39 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x4000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:40 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:40 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000000)="ce32f422f97801a1e25c839f0ceec03aa17747bae1d8698a2ffa590c56cf8f974706c8e74f537e8b00175e43eaf4857ab7497b90") 14:41:40 executing program 4: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:40 executing program 3: syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000140)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000d) 14:41:40 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x4003}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xf1, "05888e5b9de1315479ed972b56b9a26459611636bf1336beefa6c502f92679a391efa976f8831fb5ec08b9f86e29f7c9034ea180d2ae6664c253f28dd848c777eb270fd2ba9985e64b9ea885efe4881b4043e96b9b09601370c7238e80dd9aa3222d36375520366d367accb455981c1bd74b7c2f40cfc27ec70b81d41f85aebdd96868c048bf806fff37c5bf6dfad96c7ccb0e551b05e3f8b0990bf3d0d38deee9b17db8f7f7d9ffcba5664b62539dfcc9781194d44f7a4efdebbde7240c4b30d7e52d926c0e488f9ae94aa68a20739567fea3098632a2dda131d5a3e5cce0a02aba5fb247faa815dc10e04ad424f223c4"}, &(0x7f0000000080)=0xf9) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x284040, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:40 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:40 executing program 4: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:40 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x4500}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) 14:41:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14:41:40 executing program 4: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x9e], [0xc1]}) 14:41:40 executing program 0: inotify_init() r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) getpeername$packet(r1, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001500)=0x14) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000018c0)={@local, @local, 0x0}, &(0x7f0000001900)=0xc) r7 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r8, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r9 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r10, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r11 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r12, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) getpeername(0xffffffffffffffff, &(0x7f0000001940)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000019c0)=0x80) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) getsockname$packet(r14, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a40)=0x14) r16 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r16, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r17, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) recvmmsg(0xffffffffffffffff, &(0x7f0000009d80)=[{{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/56, 0x38}, {&(0x7f0000002b40)=""/96, 0x60}, {&(0x7f0000002bc0)=""/192, 0xc0}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x5, &(0x7f0000003d00)=""/54, 0x36}, 0x8}, {{&(0x7f0000003d40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/118, 0x76}, {&(0x7f0000004e40)=""/51, 0x33}, {&(0x7f0000004e80)=""/1, 0x1}, {&(0x7f0000004ec0)=""/189, 0xbd}, {&(0x7f0000004f80)=""/64, 0x40}], 0x6, &(0x7f0000005040)=""/234, 0xea}, 0x800}, {{&(0x7f0000005140)=@sco, 0x80, &(0x7f0000005340)=[{&(0x7f00000051c0)=""/11, 0xb}, {&(0x7f0000005200)=""/202, 0xca}, {&(0x7f0000005300)=""/25, 0x19}], 0x3, &(0x7f0000005380)=""/246, 0xf6}, 0x31fd}, {{&(0x7f0000005480)=@l2, 0x80, &(0x7f0000005540)=[{&(0x7f0000005500)=""/11, 0xb}], 0x1, &(0x7f0000005580)=""/238, 0xee}, 0x7f}, {{&(0x7f0000005680)=@can, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005700)=""/110, 0x6e}, {&(0x7f0000005780)=""/251, 0xfb}, {&(0x7f0000005880)=""/50, 0x32}], 0x3, &(0x7f0000005900)=""/161, 0xa1}, 0x4}, {{&(0x7f00000059c0)=@sco, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005a40)=""/134, 0x86}], 0x1, &(0x7f0000005b40)=""/147, 0x93}, 0x2}, {{&(0x7f0000005c00)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000006c80)=""/168, 0xa8}, {&(0x7f0000006d40)=""/4096, 0x1000}, {&(0x7f0000007d40)=""/94, 0x5e}], 0x4, &(0x7f0000007e00)=""/16, 0x10}, 0x6}, {{&(0x7f0000007e40)=@nfc_llcp, 0x80, &(0x7f0000008200)=[{&(0x7f0000007ec0)=""/208, 0xd0}, {&(0x7f0000007fc0)=""/81, 0x51}, {&(0x7f0000008040)=""/198, 0xc6}, {&(0x7f0000008140)=""/125, 0x7d}, {&(0x7f00000081c0)=""/44, 0x2c}], 0x5, &(0x7f0000008280)=""/45, 0x2d}, 0x401}, {{&(0x7f00000082c0)=@alg, 0x80, &(0x7f0000009980)=[{&(0x7f0000008340)=""/38, 0x26}, {&(0x7f0000008380)=""/239, 0xef}, {&(0x7f0000008480)=""/241, 0xf1}, {&(0x7f0000008580)=""/184, 0xb8}, {&(0x7f0000008640)=""/4096, 0x1000}, {&(0x7f0000009640)=""/80, 0x50}, {&(0x7f00000096c0)=""/135, 0x87}, {&(0x7f0000009780)=""/188, 0xbc}, {&(0x7f0000009840)=""/188, 0xbc}, {&(0x7f0000009900)=""/120, 0x78}], 0xa, &(0x7f0000009a40)=""/254, 0xfe}, 0x80000000}, {{&(0x7f0000009b40)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000009c80)=[{&(0x7f0000009bc0)=""/132, 0x84}], 0x1, &(0x7f0000009cc0)=""/177, 0xb1}, 0x3}], 0xa, 0x80000000, &(0x7f000000a000)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f000000a100)={@loopback, @multicast1, 0x0}, &(0x7f000000a140)=0xc) r20 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r20, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) accept4$packet(r20, &(0x7f000000a580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000a5c0)=0x14, 0x81000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000a600)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f000000a700)=0xe8) r23 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r23, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r24, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000a740)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f000000a840)=0xe8) r26 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r26, 0x4b31, 0x0) r27 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r27, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r28, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_vcan(r26, 0x8933, &(0x7f000000ab40)={'vcan0\x00', r28}) r30 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r30, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r31, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000000ab80)={'vcan0\x00', r31}) r33 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r33, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") getsockopt$inet_pktinfo(r33, 0x0, 0x8, &(0x7f000000abc0)={0x0, @dev, @empty}, &(0x7f000000ac00)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f000000b300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82400100}, 0xc, &(0x7f000000b2c0)={&(0x7f000000ac40)=ANY=[@ANYBLOB="7c060000", @ANYRES16=r0, @ANYBLOB="10002dbd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="0401020044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000400042d0600000005000207ffff000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004005b5a000008000600", @ANYRES32=r4, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400030006f4020000000900a1036f06000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r6, @ANYBLOB="7c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004fc59a6000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="8400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004004b3500000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004003200000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="8c0002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="8001020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="400002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="08000100", @ANYRES32=r24, @ANYBLOB="6401020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000104000008000600", @ANYRES32=r25, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400008000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r29, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r32, @ANYBLOB="08000100", @ANYRES32=r34, @ANYBLOB="7400020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004006c000000"], 0x67c}, 0x1, 0x0, 0x0, 0x3400c020}, 0x8000) r35 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r35, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:40 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x6000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14:41:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) 14:41:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/de\x96/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000140)={0xfffffcf6, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r1) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xca7, 0x400000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 14:41:41 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x7500}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002559b70035"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000020000008c04"]) 14:41:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) 14:41:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14:41:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) 14:41:41 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r2, 0x2}}, 0x18) 14:41:41 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x1a000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:41 executing program 2: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @sliced={0x30f, [0x5, 0x5, 0x401, 0x6, 0x7f, 0x0, 0x100, 0x1, 0x6e760419, 0x5, 0x2, 0x7ff, 0xc6c, 0xfff, 0x661, 0xf63, 0x2000000000000002, 0x7, 0x1ff, 0x22a0, 0x3ff, 0xfffffffffffffff7, 0xffff, 0x5, 0x7fffffff, 0x1f, 0xae4, 0x77, 0x8, 0x9, 0xffffffffffff7fff, 0x1ff, 0x6, 0x100000000, 0x1, 0x80, 0x10000, 0x1, 0x7, 0x8000, 0x8, 0x3f, 0x1, 0x0, 0x7, 0x5, 0x7ffffffb, 0xffffffff], 0x3}}) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r4 = epoll_create1(0x0) flock(r4, 0x2) dup2(0xffffffffffffffff, r4) r5 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r3, &(0x7f0000000040)={r4, r5, 0x7}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = eventfd2(0x0, 0x0) readv(r1, 0x0, 0x0) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x280080) sendfile(r2, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) r3 = socket(0x10, 0x80003, 0x0) sendto(r3, &(0x7f0000000bc0)="120000001200e7ef007b0000f4afd7030a", 0x11, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) 14:41:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, 0x0) 14:41:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, 0x0}, 0x0) 14:41:41 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x501000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x7, 0x8, 0x4, 0x8, 0x43b2}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:41 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x34000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, 0x0) 14:41:41 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1, 0x0) 14:41:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x200200, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:41 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x400300}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:41 executing program 3: madvise(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:41:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, 0x0) 14:41:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, 0x0}, 0x0) 14:41:41 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0xa00100}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:42 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffd, 0x40) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x0, 0x0, 0x0}) 14:41:42 executing program 0: inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x0, 0x1, 0x4}) 14:41:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000100)={0x10300, 0x0, 0x97ffffff, 0x0, 0x0, 0x7ff0bdbe}) 14:41:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, 0x0}, 0x0) 14:41:42 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x1000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:42 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x200, 0x405c0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x02', 0x7ffd, 0x1100) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00') ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000040)) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)={0x101, 0x8, [0x4, 0x9]}) 14:41:42 executing program 0: inotify_init() getpgid(0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1000000000015) r1 = syz_open_procfs(r0, &(0x7f0000000080)='f\x18\f\x00\x00\xb6\xd2\xe9\x8by\xa9z') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x0) 14:41:42 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) [ 997.994294][ C0] net_ratelimit: 21 callbacks suppressed [ 997.994302][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 997.994334][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 998.000013][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:41:42 executing program 3: 14:41:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:41:42 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x2000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:42 executing program 4: 14:41:42 executing program 3: 14:41:42 executing program 4: 14:41:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000000)={'eql\x00', @ifru_ivalue=0x6}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:42 executing program 3: 14:41:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:41:42 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x3000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 998.874290][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 998.880083][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 998.885947][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 998.891699][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 999.274310][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 999.280172][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 999.286019][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:41:45 executing program 0: 14:41:45 executing program 4: 14:41:45 executing program 3: 14:41:45 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x4000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:41:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @empty={[0x4]}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1e4, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2d1db8a3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x93ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER={0xf4, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000098}, 0x24000090) 14:41:45 executing program 3: 14:41:45 executing program 4: [ 1001.133974][T28542] Enabling of bearer rejected, failed to enable media 14:41:45 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x5000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:45 executing program 0: 14:41:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:45 executing program 4: 14:41:45 executing program 3: 14:41:45 executing program 0: 14:41:45 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x6000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:45 executing program 4: 14:41:46 executing program 0: 14:41:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:46 executing program 3: 14:41:46 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x7000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:46 executing program 4: 14:41:46 executing program 3: 14:41:46 executing program 0: 14:41:46 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x20000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:46 executing program 4: 14:41:46 executing program 3: 14:41:46 executing program 4: 14:41:46 executing program 0: 14:41:46 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x40000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000100)=0x78) 14:41:46 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb9, 0x200800000008042) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 14:41:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000780)=[@increfs_done], 0x0, 0x0, 0x0}) 14:41:46 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x40030000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "a62cb48d"}}]}, 0x140}}, 0x0) 14:41:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x160, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="2e360f2b99dc00660f71e0ff0f01c80fe0b41e002e0f01cb0f01cfba4000b860bdef0f58bd00000f01b100000f0118", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 14:41:47 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:47 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x45000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1002.784047][T28746] FAULT_INJECTION: forcing a failure. [ 1002.784047][T28746] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.831426][T28746] CPU: 1 PID: 28746 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 1002.839014][T28746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.839022][T28746] Call Trace: [ 1002.839044][T28746] dump_stack+0x172/0x1f0 [ 1002.839076][T28746] should_fail.cold+0xa/0x15 [ 1002.861388][T28746] ? fault_create_debugfs_attr+0x180/0x180 [ 1002.867208][T28746] ? ___might_sleep+0x163/0x280 [ 1002.867230][T28746] __should_failslab+0x121/0x190 [ 1002.867250][T28746] should_failslab+0x9/0x14 [ 1002.881620][T28746] __kmalloc+0x2e0/0x770 [ 1002.881637][T28746] ? mark_held_locks+0xf0/0xf0 [ 1002.881654][T28746] ? __kasan_check_read+0x11/0x20 [ 1002.890643][T28746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1002.901889][T28746] ? debug_smp_processor_id+0x3c/0x214 [ 1002.907364][T28746] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1002.907383][T28746] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1002.918647][T28746] ? tomoyo_path_number_perm+0x193/0x520 [ 1002.924300][T28746] tomoyo_path_number_perm+0x1dd/0x520 [ 1002.929772][T28746] ? tomoyo_path_number_perm+0x193/0x520 [ 1002.935439][T28746] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1002.935455][T28746] ? __f_unlock_pos+0x19/0x20 [ 1002.935507][T28746] ? __fget+0x384/0x560 [ 1002.935528][T28746] ? ksys_dup3+0x3e0/0x3e0 [ 1002.954531][T28746] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1002.954550][T28746] ? fput_many+0x12c/0x1a0 [ 1002.954569][T28746] tomoyo_file_ioctl+0x23/0x30 [ 1002.954586][T28746] security_file_ioctl+0x77/0xc0 [ 1002.954603][T28746] ksys_ioctl+0x57/0xd0 [ 1002.954621][T28746] __x64_sys_ioctl+0x73/0xb0 [ 1002.954640][T28746] do_syscall_64+0xfa/0x760 [ 1002.954661][T28746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.954672][T28746] RIP: 0033:0x459a09 [ 1002.954686][T28746] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1002.954699][T28746] RSP: 002b:00007f48abbbbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1002.975004][T28746] RAX: ffffffffffffffda RBX: 00007f48abbbbc90 RCX: 0000000000459a09 [ 1002.975014][T28746] RDX: 0000000020000000 RSI: fffffbff7ff3ffb1 RDI: 0000000000000003 [ 1002.975028][T28746] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1002.988242][T28746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48abbbc6d4 [ 1002.988252][T28746] R13: 00000000004c0e12 R14: 00000000004d4070 R15: 0000000000000004 [ 1003.044323][ C1] net_ratelimit: 17 callbacks suppressed [ 1003.044331][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:41:47 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) [ 1003.079715][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.085605][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.091400][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.102091][T28746] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1003.178610][T28862] FAULT_INJECTION: forcing a failure. [ 1003.178610][T28862] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.191250][T28862] CPU: 0 PID: 28862 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 1003.198799][T28862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.208865][T28862] Call Trace: [ 1003.212164][T28862] dump_stack+0x172/0x1f0 [ 1003.216497][T28862] should_fail.cold+0xa/0x15 [ 1003.216536][T28862] ? lock_acquire+0x190/0x410 [ 1003.216555][T28862] ? fault_create_debugfs_attr+0x180/0x180 [ 1003.216581][T28862] __should_failslab+0x121/0x190 [ 1003.236511][T28862] should_failslab+0x9/0x14 [ 1003.241000][T28862] __kmalloc_track_caller+0x6d/0x760 [ 1003.246268][T28862] ? __might_fault+0x12b/0x1e0 [ 1003.251034][T28862] ? find_held_lock+0x35/0x130 [ 1003.255870][T28862] ? netlink_realloc_groups+0x18f/0x290 [ 1003.261398][T28862] krealloc+0x66/0xd0 [ 1003.265362][T28862] netlink_realloc_groups+0x18f/0x290 [ 1003.270719][T28862] netlink_bind+0x802/0xaf0 [ 1003.275205][T28862] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1003.280819][T28862] ? aa_sk_perm+0x288/0x880 [ 1003.285308][T28862] ? netlink_setsockopt+0xa40/0xa40 [ 1003.290489][T28862] ? apparmor_socket_bind+0xb6/0x160 [ 1003.295757][T28862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1003.301979][T28862] ? security_socket_bind+0x8d/0xc0 [ 1003.307172][T28862] __sys_bind+0x239/0x290 [ 1003.311483][T28862] ? __ia32_sys_socketpair+0xf0/0xf0 [ 1003.316782][T28862] ? fput+0x1b/0x20 [ 1003.320582][T28862] ? ksys_write+0x1cf/0x290 [ 1003.325072][T28862] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1003.330511][T28862] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1003.335954][T28862] ? do_syscall_64+0x26/0x760 [ 1003.340612][T28862] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.346661][T28862] ? do_syscall_64+0x26/0x760 [ 1003.351330][T28862] __x64_sys_bind+0x73/0xb0 [ 1003.355816][T28862] do_syscall_64+0xfa/0x760 [ 1003.360312][T28862] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.366183][T28862] RIP: 0033:0x459a09 [ 1003.370062][T28862] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1003.389656][T28862] RSP: 002b:00007efef290ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1003.398049][T28862] RAX: ffffffffffffffda RBX: 00007efef290ac90 RCX: 0000000000459a09 [ 1003.406010][T28862] RDX: 000000000000000c RSI: 0000000020000000 RDI: 0000000000000003 [ 1003.413963][T28862] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1003.421913][T28862] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef290b6d4 14:41:47 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="ffdca5055e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) name_to_handle_at(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f00000005c0)={0x7a, 0x101, "d6987193a21ff1c8e3c249dfe68db632063fde5cd2ac83b44c078a6ee024e7d54e8b7739f8b69fd9bb6edc37acbdd4bcf7bce3f3187bcabbfbfb0be9bc24c7075cea9ac7452b618e6537a7cd30ad50150ce0ae0be4299d4fd1de966afd32d0240b3307c49dcc671f3cd5a3bed5f54d15100d"}, &(0x7f0000000440), 0xef49b86a0e89e8fa) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@loopback, @in6=@dev={0xfe, 0x80, [], 0x14}, 0x4e23, 0x1ff, 0x4e23, 0x9, 0xa, 0x20, 0x100, 0x0, 0x0, r4}, {0x8, 0x100000001, 0xffff, 0x9bee, 0x60, 0x3, 0x0, 0x8}, {0x800, 0x3, 0x9}, 0x6, 0x6e6bb1, 0x1, 0x1, 0x4}, {{@in6=@mcast2, 0x4d4, 0xff}, 0x2, @in6=@loopback, 0x3507, 0x0, 0x767dc50eb22f8c26, 0x800, 0x5, 0x6, 0x10000}}, 0xe8) recvmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000006c0)=""/141, 0x8d}], 0x2}}], 0x1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000b40)=[{{0x0, 0xfffffffffffffcfb, &(0x7f0000000200)=[{&(0x7f0000000100)="8cb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f68cd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce373751008f2fe11265fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefdd198891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404000000000000", 0xbc}, {&(0x7f0000000340)="4520d8c1ee8e08b9ee293229", 0x28c}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="6704848d55e654ad6f06f85d5c8caed968361a080c9a53252ca10c8e9f2257b4300eccf6f7e8f49e10382d24c8e304851ba9f674097b80c63dc396090a3762753a1400aba6fc2b7dcec89c4c03bb4f4a995e7f0d40", 0x55}], 0x1}}], 0x3, 0x40000) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f652cb967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f110b023d67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe6a, 0x3, 0x0, 0x27) [ 1003.429867][T28862] R13: 00000000004bfb8b R14: 00000000004d1898 R15: 0000000000000004 [ 1003.444457][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.450325][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.456756][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.462551][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:47 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r5, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0xa, [0x1ff, 0x8000, 0x3f, 0xdfd, 0x100000001, 0x7, 0x1ff, 0x7fffffff, 0x3ff, 0x3ff]}, 0x18) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001300)={@hci={0x1f, r5, 0x1}, {&(0x7f0000001240)=""/76, 0x4c}, &(0x7f00000012c0), 0x10}, 0xa0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000200)=0x1) ioctl$KDDISABIO(r2, 0x4b37) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x10, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=0x6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r6, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x12, 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="dc2fe0fff0ffffffcdaa5c1d890832d19aff2bb4b8b40c9de5bcd96becaa997a909d11e38f67b4cb2a73a5193ac2fe91a60a711ebbc71313bda05ac6c8a46bceab5d4ed6a132eae3a8f79473794b9c61ee3bd574657a7d1bf504f840042da2ac41e6ebb0ecdeaf93143231141501d255fe1638c4bce43efd3186e5393b7f8a56b2d90d3c0cdd5bc52b07e5eaf7401b8589"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000140)=""/4096, 0x41000, 0x7, [], 0x0, 0x9, r7, 0x8, &(0x7f0000001140)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x1, 0x2, 0x8, 0xca}, 0x10}, 0x70) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffda6, 0x0, 0x0}) [ 1003.521420][T28867] FAULT_INJECTION: forcing a failure. [ 1003.521420][T28867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1003.534665][T28867] CPU: 1 PID: 28867 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 1003.542216][T28867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.552282][T28867] Call Trace: [ 1003.555589][T28867] dump_stack+0x172/0x1f0 [ 1003.559948][T28867] should_fail.cold+0xa/0x15 [ 1003.564567][T28867] ? fault_create_debugfs_attr+0x180/0x180 [ 1003.570396][T28867] ? lock_downgrade+0x920/0x920 [ 1003.575271][T28867] should_fail_alloc_page+0x50/0x60 [ 1003.580487][T28867] __alloc_pages_nodemask+0x1a1/0x900 [ 1003.585865][T28867] ? __kasan_check_read+0x11/0x20 [ 1003.585888][T28867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1003.585906][T28867] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1003.585930][T28867] ? fault_create_debugfs_attr+0x180/0x180 [ 1003.585950][T28867] cache_grow_begin+0x90/0xd20 [ 1003.585965][T28867] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1003.585979][T28867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1003.585996][T28867] __kmalloc+0x6b2/0x770 [ 1003.602961][T28867] ? mark_held_locks+0xf0/0xf0 [ 1003.602978][T28867] ? __kasan_check_read+0x11/0x20 [ 1003.602996][T28867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1003.603018][T28867] ? debug_smp_processor_id+0x3c/0x214 [ 1003.619270][T28867] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1003.619293][T28867] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1003.619310][T28867] ? tomoyo_path_number_perm+0x193/0x520 14:41:48 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x60000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1003.619335][T28867] tomoyo_path_number_perm+0x1dd/0x520 [ 1003.629798][T28867] ? tomoyo_path_number_perm+0x193/0x520 [ 1003.629818][T28867] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1003.629834][T28867] ? __f_unlock_pos+0x19/0x20 [ 1003.629889][T28867] ? __fget+0x384/0x560 [ 1003.639642][T28867] ? ksys_dup3+0x3e0/0x3e0 [ 1003.639661][T28867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1003.639677][T28867] ? fput_many+0x12c/0x1a0 [ 1003.639699][T28867] tomoyo_file_ioctl+0x23/0x30 [ 1003.662624][T28867] security_file_ioctl+0x77/0xc0 [ 1003.662647][T28867] ksys_ioctl+0x57/0xd0 [ 1003.662666][T28867] __x64_sys_ioctl+0x73/0xb0 [ 1003.662688][T28867] do_syscall_64+0xfa/0x760 [ 1003.679429][T28867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.679443][T28867] RIP: 0033:0x459a09 [ 1003.679460][T28867] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1003.679468][T28867] RSP: 002b:00007f48abbbbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:41:48 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) [ 1003.679480][T28867] RAX: ffffffffffffffda RBX: 00007f48abbbbc90 RCX: 0000000000459a09 [ 1003.679496][T28867] RDX: 0000000020000000 RSI: fffffbff7ff3ffb1 RDI: 0000000000000003 [ 1003.714030][T28867] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1003.714041][T28867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48abbbc6d4 [ 1003.714050][T28867] R13: 00000000004c0e12 R14: 00000000004d4070 R15: 0000000000000004 [ 1003.914769][T28865] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:41:48 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:48 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "8885adaf0e4c7d66", "82378b14bfbf6081b5c856710c91fc6a", "14c2a64f", "7b84e13298c38ea8"}, 0x28) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/93) 14:41:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:48 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x75000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:48 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev, {[@timestamp={0x7, 0xc, 0x5, 0x0, 0x0, [{}, {}]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x4e, "8f8b8e", "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"}}, 0x110) [ 1004.106394][T29046] FAULT_INJECTION: forcing a failure. [ 1004.106394][T29046] name failslab, interval 1, probability 0, space 0, times 0 14:41:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x804, &(0x7f00000000c0)=0x0) io_cancel(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff09}, 0x0) io_submit(r2, 0x7, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfe}]) [ 1004.202100][T29046] CPU: 1 PID: 29046 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 1004.209694][T29046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.219758][T29046] Call Trace: [ 1004.223062][T29046] dump_stack+0x172/0x1f0 [ 1004.227410][T29046] should_fail.cold+0xa/0x15 [ 1004.232017][T29046] ? fault_create_debugfs_attr+0x180/0x180 [ 1004.234309][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.237854][T29046] ? ___might_sleep+0x163/0x280 [ 1004.237878][T29046] __should_failslab+0x121/0x190 [ 1004.237903][T29046] should_failslab+0x9/0x14 [ 1004.243653][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.248433][T29046] __kmalloc+0x2e0/0x770 [ 1004.248450][T29046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1004.248466][T29046] ? d_absolute_path+0x11b/0x170 [ 1004.248479][T29046] ? __d_path+0x140/0x140 [ 1004.248492][T29046] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1004.248510][T29046] tomoyo_encode2.part.0+0xf5/0x400 [ 1004.293859][T29046] tomoyo_encode+0x2b/0x50 [ 1004.298293][T29046] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1004.303955][T29046] tomoyo_path_number_perm+0x1dd/0x520 [ 1004.309425][T29046] ? tomoyo_path_number_perm+0x193/0x520 [ 1004.315076][T29046] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1004.320891][T29046] ? __f_unlock_pos+0x19/0x20 [ 1004.325607][T29046] ? __fget+0x384/0x560 [ 1004.329779][T29046] ? ksys_dup3+0x3e0/0x3e0 [ 1004.334203][T29046] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1004.340453][T29046] ? fput_many+0x12c/0x1a0 [ 1004.344890][T29046] tomoyo_file_ioctl+0x23/0x30 [ 1004.349665][T29046] security_file_ioctl+0x77/0xc0 [ 1004.354614][T29046] ksys_ioctl+0x57/0xd0 [ 1004.358779][T29046] __x64_sys_ioctl+0x73/0xb0 [ 1004.363385][T29046] do_syscall_64+0xfa/0x760 [ 1004.367904][T29046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.373793][T29046] RIP: 0033:0x459a09 [ 1004.377690][T29046] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1004.397298][T29046] RSP: 002b:00007f48abbbbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1004.405726][T29046] RAX: ffffffffffffffda RBX: 00007f48abbbbc90 RCX: 0000000000459a09 [ 1004.413708][T29046] RDX: 0000000020000000 RSI: fffffbff7ff3ffb1 RDI: 0000000000000003 [ 1004.421695][T29046] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1004.429672][T29046] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48abbbc6d4 [ 1004.437646][T29046] R13: 00000000004c0e12 R14: 00000000004d4070 R15: 0000000000000004 14:41:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:41:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:48 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x8dffffff}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1004.463635][T29046] ERROR: Out of memory at tomoyo_realpath_from_path. 14:41:49 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:49 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0xf5ffffff}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:49 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000140)=0xbed4c85ce0e554a8) close(r0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f0000003500)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/247, 0xf7}], 0x1, &(0x7f0000000280)=""/12, 0xc}, 0x3}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000640)=""/233, 0xe9}, {&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/145, 0x91}], 0x8, &(0x7f0000000a40)=""/104, 0x68}, 0x58b}, {{&(0x7f0000000ac0)=@nfc_llcp, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000b40)=""/251, 0xfb}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x2, &(0x7f0000001c80)=""/45, 0x2d}, 0x7e3b}, {{&(0x7f0000001cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/42, 0x2a}, {&(0x7f0000001d80)=""/2, 0x2}, {&(0x7f0000001dc0)=""/144, 0x90}, {&(0x7f0000001e80)=""/251, 0xfb}], 0x4, &(0x7f0000001fc0)=""/106, 0x6a}, 0x1c26}, {{&(0x7f0000002040)=@vsock, 0x80, &(0x7f0000002380)=[{&(0x7f00000020c0)=""/3, 0x3}, {&(0x7f0000002100)=""/174, 0xae}, {&(0x7f00000021c0)=""/184, 0xb8}, {&(0x7f0000002280)=""/238, 0xee}], 0x4, &(0x7f00000023c0)=""/95, 0x5f}, 0x6}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000002680)=[{&(0x7f00000024c0)=""/5, 0x5}, {&(0x7f0000002500)=""/183, 0xb7}, {&(0x7f00000025c0)=""/19, 0x13}, {&(0x7f0000002600)=""/95, 0x5f}], 0x4, &(0x7f00000026c0)=""/236, 0xec}, 0x4}, {{&(0x7f00000027c0)=@xdp, 0x80, &(0x7f0000002900)=[{&(0x7f0000002840)=""/129, 0x81}], 0x1, &(0x7f0000002940)=""/184, 0xb8}, 0x9}, {{&(0x7f0000002a00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)=""/62, 0x3e}, {&(0x7f0000002bc0)=""/63, 0x3f}, {&(0x7f0000002c00)=""/37, 0x25}, {&(0x7f0000002c40)=""/193, 0xc1}, {&(0x7f0000002d40)=""/230, 0xe6}, {&(0x7f0000002e40)=""/156, 0x9c}], 0x7, &(0x7f0000002f80)=""/122, 0x7a}, 0x100000001}, {{&(0x7f0000003000)=@rc, 0x80, &(0x7f0000003180)=[{&(0x7f0000003080)=""/196, 0xc4}], 0x1, &(0x7f00000031c0)=""/228, 0xe4}, 0x5}], 0x9, 0x40, &(0x7f0000003540)={r3, r4+10000000}) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x8000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1004.818782][T29327] FAULT_INJECTION: forcing a failure. [ 1004.818782][T29327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1004.832056][T29327] CPU: 0 PID: 29327 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 1004.839726][T29327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.839734][T29327] Call Trace: [ 1004.839759][T29327] dump_stack+0x172/0x1f0 [ 1004.839782][T29327] should_fail.cold+0xa/0x15 [ 1004.839798][T29327] ? __kasan_check_read+0x11/0x20 [ 1004.839817][T29327] ? fault_create_debugfs_attr+0x180/0x180 [ 1004.839833][T29327] ? perf_trace_lock+0xeb/0x4c0 [ 1004.839852][T29327] ? __kasan_check_read+0x11/0x20 [ 1004.882985][T29327] should_fail_alloc_page+0x50/0x60 [ 1004.888212][T29327] __alloc_pages_nodemask+0x1a1/0x900 [ 1004.893613][T29327] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1004.899266][T29327] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1004.904986][T29327] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1004.905011][T29327] ? fault_create_debugfs_attr+0x180/0x180 [ 1004.916417][T29327] cache_grow_begin+0x90/0xd20 [ 1004.916502][T29327] ? drm_ioctl+0x465/0xa55 [ 1004.916524][T29327] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1004.931921][T29327] __kmalloc+0x6b2/0x770 [ 1004.936180][T29327] ? drm_ioctl+0x465/0xa55 [ 1004.940612][T29327] drm_ioctl+0x465/0xa55 [ 1004.944973][T29327] ? drm_mode_getfb+0x5e0/0x5e0 [ 1004.949826][T29327] ? drm_version+0x3d0/0x3d0 [ 1004.949842][T29327] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1004.949856][T29327] ? __f_unlock_pos+0x19/0x20 [ 1004.949887][T29327] ? drm_version+0x3d0/0x3d0 [ 1004.969575][T29327] do_vfs_ioctl+0xdb6/0x13e0 [ 1004.974163][T29327] ? ioctl_preallocate+0x210/0x210 [ 1004.979292][T29327] ? __fget+0x384/0x560 [ 1004.983491][T29327] ? ksys_dup3+0x3e0/0x3e0 [ 1004.987938][T29327] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1004.994199][T29327] ? fput_many+0x12c/0x1a0 [ 1004.998620][T29327] ? tomoyo_file_ioctl+0x23/0x30 [ 1005.003569][T29327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1005.009848][T29327] ? security_file_ioctl+0x8d/0xc0 [ 1005.009866][T29327] ksys_ioctl+0xab/0xd0 [ 1005.009882][T29327] __x64_sys_ioctl+0x73/0xb0 [ 1005.009899][T29327] do_syscall_64+0xfa/0x760 [ 1005.009920][T29327] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.034132][T29327] RIP: 0033:0x459a09 [ 1005.038039][T29327] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1005.057672][T29327] RSP: 002b:00007f48abbbbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:41:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x24, 0x2, 0x70bd2b, 0x25dfdbfd, {0x20}, [@typed={0x8, 0x52, @fd=r2}, @typed={0xc, 0x64, @str='md5sum\x00'}, @typed={0x8, 0x4, @ipv4=@multicast2}, @generic="8e2aaf34a9a5f298c1c2c6ab08fb0729f6b079f979f4dae4ee6909e69435e731665d3a94dc64754939203afa3d15ee26e07958a817dfaff000dbb001e59e6ad9cabc57a4d463ac14e67bfd3123462f3e404f32a6176dde2123294781a66b19708d088f6ab3a1e8a4ad1b4e"]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) [ 1005.057686][T29327] RAX: ffffffffffffffda RBX: 00007f48abbbbc90 RCX: 0000000000459a09 [ 1005.057694][T29327] RDX: 0000000020000000 RSI: fffffbff7ff3ffb1 RDI: 0000000000000003 [ 1005.057702][T29327] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1005.057709][T29327] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48abbbc6d4 [ 1005.057716][T29327] R13: 00000000004c0e12 R14: 00000000004d4070 R15: 0000000000000004 14:41:49 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:41:49 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0xffffff8d}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x260948c1}, 0xb) [ 1005.332950][T29448] FAULT_INJECTION: forcing a failure. [ 1005.332950][T29448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1005.347186][T29448] CPU: 1 PID: 29448 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 1005.354739][T29448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.364806][T29448] Call Trace: [ 1005.368120][T29448] dump_stack+0x172/0x1f0 [ 1005.372471][T29448] should_fail.cold+0xa/0x15 [ 1005.377075][T29448] ? __kasan_check_read+0x11/0x20 [ 1005.382121][T29448] ? fault_create_debugfs_attr+0x180/0x180 [ 1005.387939][T29448] ? perf_trace_lock+0xeb/0x4c0 [ 1005.392806][T29448] ? __kasan_check_read+0x11/0x20 [ 1005.397867][T29448] should_fail_alloc_page+0x50/0x60 [ 1005.403077][T29448] __alloc_pages_nodemask+0x1a1/0x900 [ 1005.408887][T29448] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1005.414536][T29448] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1005.420266][T29448] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1005.425918][T29448] ? fault_create_debugfs_attr+0x180/0x180 [ 1005.431743][T29448] cache_grow_begin+0x90/0xd20 [ 1005.436514][T29448] ? drm_ioctl+0x465/0xa55 [ 1005.440937][T29448] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1005.447195][T29448] __kmalloc+0x6b2/0x770 [ 1005.451444][T29448] ? drm_ioctl+0x465/0xa55 [ 1005.455855][T29448] drm_ioctl+0x465/0xa55 [ 1005.455870][T29448] ? drm_mode_getfb+0x5e0/0x5e0 [ 1005.455890][T29448] ? drm_version+0x3d0/0x3d0 [ 1005.455907][T29448] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1005.455920][T29448] ? __f_unlock_pos+0x19/0x20 [ 1005.455953][T29448] ? drm_version+0x3d0/0x3d0 [ 1005.455970][T29448] do_vfs_ioctl+0xdb6/0x13e0 [ 1005.489239][T29448] ? ioctl_preallocate+0x210/0x210 [ 1005.494354][T29448] ? __fget+0x384/0x560 [ 1005.498525][T29448] ? ksys_dup3+0x3e0/0x3e0 [ 1005.502940][T29448] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1005.502957][T29448] ? fput_many+0x12c/0x1a0 [ 1005.502980][T29448] ? tomoyo_file_ioctl+0x23/0x30 [ 1005.502996][T29448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1005.503018][T29448] ? security_file_ioctl+0x8d/0xc0 [ 1005.529923][T29448] ksys_ioctl+0xab/0xd0 14:41:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xff0b) [ 1005.534095][T29448] __x64_sys_ioctl+0x73/0xb0 [ 1005.538701][T29448] do_syscall_64+0xfa/0x760 [ 1005.543221][T29448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.549118][T29448] RIP: 0033:0x459a09 [ 1005.553027][T29448] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1005.572633][T29448] RSP: 002b:00007f48abbbbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.572648][T29448] RAX: ffffffffffffffda RBX: 00007f48abbbbc90 RCX: 0000000000459a09 [ 1005.572656][T29448] RDX: 0000000020000000 RSI: fffffbff7ff3ffb1 RDI: 0000000000000003 [ 1005.572665][T29448] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1005.572673][T29448] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48abbbc6d4 [ 1005.572682][T29448] R13: 00000000004c0e12 R14: 00000000004d4070 R15: 0000000000000004 14:41:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:41:50 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0xfffffff5}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:50 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000140)=0xbed4c85ce0e554a8) close(r0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f0000003500)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/247, 0xf7}], 0x1, &(0x7f0000000280)=""/12, 0xc}, 0x3}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000640)=""/233, 0xe9}, {&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/145, 0x91}], 0x8, &(0x7f0000000a40)=""/104, 0x68}, 0x58b}, {{&(0x7f0000000ac0)=@nfc_llcp, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000b40)=""/251, 0xfb}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x2, &(0x7f0000001c80)=""/45, 0x2d}, 0x7e3b}, {{&(0x7f0000001cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/42, 0x2a}, {&(0x7f0000001d80)=""/2, 0x2}, {&(0x7f0000001dc0)=""/144, 0x90}, {&(0x7f0000001e80)=""/251, 0xfb}], 0x4, &(0x7f0000001fc0)=""/106, 0x6a}, 0x1c26}, {{&(0x7f0000002040)=@vsock, 0x80, &(0x7f0000002380)=[{&(0x7f00000020c0)=""/3, 0x3}, {&(0x7f0000002100)=""/174, 0xae}, {&(0x7f00000021c0)=""/184, 0xb8}, {&(0x7f0000002280)=""/238, 0xee}], 0x4, &(0x7f00000023c0)=""/95, 0x5f}, 0x6}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000002680)=[{&(0x7f00000024c0)=""/5, 0x5}, {&(0x7f0000002500)=""/183, 0xb7}, {&(0x7f00000025c0)=""/19, 0x13}, {&(0x7f0000002600)=""/95, 0x5f}], 0x4, &(0x7f00000026c0)=""/236, 0xec}, 0x4}, {{&(0x7f00000027c0)=@xdp, 0x80, &(0x7f0000002900)=[{&(0x7f0000002840)=""/129, 0x81}], 0x1, &(0x7f0000002940)=""/184, 0xb8}, 0x9}, {{&(0x7f0000002a00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)=""/62, 0x3e}, {&(0x7f0000002bc0)=""/63, 0x3f}, {&(0x7f0000002c00)=""/37, 0x25}, {&(0x7f0000002c40)=""/193, 0xc1}, {&(0x7f0000002d40)=""/230, 0xe6}, {&(0x7f0000002e40)=""/156, 0x9c}], 0x7, &(0x7f0000002f80)=""/122, 0x7a}, 0x100000001}, {{&(0x7f0000003000)=@rc, 0x80, &(0x7f0000003180)=[{&(0x7f0000003080)=""/196, 0xc4}], 0x1, &(0x7f00000031c0)=""/228, 0xe4}, 0x5}], 0x9, 0x40, &(0x7f0000003540)={r3, r4+10000000}) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x8000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:41:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = getpid() r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0xf}, 0xc0000000}, @ib={0x1b, 0x5, 0x5, {"b8acf60728fbc40df2fc4ec3a103c277"}, 0x1, 0x8000}}}, 0x118) capget(&(0x7f0000000080)={0x19980330, r1}, &(0x7f00000000c0)={0x200, 0x4, 0x3, 0x400, 0x10000, 0x1}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x7c1a, 0x10000, 0xcbef, 0x101}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4ee91b0f0b65989b}, 0x1fb) 14:41:50 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x40030000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:41:50 executing program 0: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$bt_hci(r1, 0x0, 0x16, 0x0, &(0x7f00000003c0)) fallocate(r0, 0x0, 0x18000000000, 0x4) 14:41:50 executing program 3 (fault-call:1 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x180d001}, 0x6) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)={r6, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x4}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r8 = fcntl$getown(0xffffffffffffffff, 0x9) tgkill(r8, 0xffffffffffffffff, 0xd) r9 = dup2(r2, r3) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r12, 0xc018ae85, &(0x7f0000000000)={0x2}) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r15, 0xc018ae85, &(0x7f0000000000)={0x2}) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_GET_REGS(r9, 0x8090ae81, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000080)={{0x1, 0x2}, 'port0\x00', 0x28, 0x4, 0x4, 0x1, 0xffffffffffff84e4, 0x175, 0x1000, 0x0, 0x5, 0x8}) 14:41:50 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0xa0010000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:50 executing program 5 (fault-call:8 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = dup(r0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000680)={r5, @rand_addr=0x5, @rand_addr=0xff800}, 0xffffffffffffffb8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={r6, @remote, @loopback}, 0x3) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r6}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc0100}, 0xc, &(0x7f0000000740)={&(0x7f0000000a80)=ANY=[@ANYBLOB="24010000", @ANYRES16=r7, @ANYBLOB="000426bd7000fedbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="bc000200400001002400f50070c0280452697479000000000000000000000000000000000000000000000000080003000e00000008349e48d781f1f1000400018ea5c60e8930ad41740bcf4e8c5332d1a79d18", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100780dfa9841c9de4e789d54e8ddb0c78c66769cc277b05aedbdc2eb1e386bf4a28eb87e1b94e9a06923b7edc512eb0e76d16c4778dd24e7479b59a367c2a57e6d339656e10f7c73c94624fb08c6b06eb3e08e2561aa74c1f3a412e242f3e0e57d0a7fa8c94481e2f73b08b3e41c5cef7f44621c2b01adaa2379f1295de3c5946ca4bc5cd3c6ae8f7a0000000078485bf0528352c3af0522d3d0c7ab2deb4853afea906586d5d1f615a00f6212ea672b63f005b86650ef8bb45d1495a1217d718cf6", @ANYRES32=r5, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r9 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r10, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r13 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r13, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r14, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r15 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r15, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r15, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r16 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r16, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r17, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', r17}) r19 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r19, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r19, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000540)={'erspan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000680)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) r23 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r23, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r24, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r25 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r25, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r26, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r27 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r27, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r28, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r29 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r29, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r30, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r31 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r31, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r32, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r33 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r33, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r34, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r35 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r35, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r36, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r37 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r37, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) accept$packet(r37, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) r39 = socket$inet(0x10, 0x2, 0x0) sendmsg(r39, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_pktinfo(r39, 0x0, 0x8, &(0x7f0000000880)={0x0, @empty, @dev}, &(0x7f00000008c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @dev, @multicast1}, &(0x7f0000000940)=0xc) r42 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r42, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r43, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000980)={@mcast1, 0x0}, &(0x7f00000009c0)=0x14) r45 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r45, 0x4b31, 0x0) r46 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r46, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r47, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_vcan(r45, 0x8933, &(0x7f0000000a00)={'vcan0\x00', r47}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e40)=0x14) r50 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r50, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r51, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r52 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r52, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) accept$packet(r52, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000f80)=0x14) r54 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r54, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r55, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r56 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r56, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r57, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r58 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r58, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r58, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r58, 0x29, 0x23, &(0x7f0000000fc0)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000010c0)=0xe8) r60 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r60, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r61, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) r62 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r62, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x4, r63, 0x34}, {0x0}, &(0x7f0000000040)}, 0xa0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="a80b0000", @ANYRES16=r7, @ANYBLOB="040025bd7000fcdbdf250300000008000100", @ANYRES32=r10, @ANYBLOB="b800020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400fb09000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400200000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="040102004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400590000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000080080007000000000008000100", @ANYRES32=r21, @ANYBLOB="f00102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff01000008000600", @ANYRES32=r24, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000600", @ANYRES32=r26, @ANYBLOB="08000100", @ANYRES32=r28, @ANYBLOB="ac0102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r30, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400080000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r32, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r34, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r36, @ANYBLOB="b40002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r38, @ANYBLOB="3c000100656e61626c6564000000000000000000000000000000000000000000000000000800030006000000040004000800060000000000", @ANYRES32=r40, @ANYBLOB="38000100240001006c625f66726572685f696e74657276616c0000000000000008000300278a880300000008000400060000000840df9ef96b5e498d1fbb368993aa7bf0474dadac1552e9e5cc95c900e8d48e592be728e6fbf255eaf056e7aed28441b267f674a0ff69ab3dc3aae2e2082b36810000000000000000000000000000000000000c1ffee8192d90d63ff1642c39d7e539ba743c738911c55923d6517bde43dfd6676c23ec5819690000000000000000", @ANYRES32=r41, @ANYBLOB="080202003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r43, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r44, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r48, @ANYBLOB="08000100", @ANYRES32=r49, @ANYBLOB="4400020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r51, @ANYBLOB="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", @ANYRES32=r53, @ANYBLOB="3801020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r55, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r57, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e636500400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004008000000008000600", @ANYRES32=r59, @ANYBLOB="08000100", @ANYRES32=r61, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c004ffff08000600", @ANYRES32=r63], 0xba8}, 0x1, 0x0, 0x0, 0x60}, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) [ 1006.432524][T29603] FAULT_INJECTION: forcing a failure. [ 1006.432524][T29603] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.497882][T29603] CPU: 0 PID: 29603 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 1006.505469][T29603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.515527][T29603] Call Trace: [ 1006.515551][T29603] dump_stack+0x172/0x1f0 [ 1006.515576][T29603] should_fail.cold+0xa/0x15 [ 1006.515597][T29603] ? fault_create_debugfs_attr+0x180/0x180 [ 1006.515618][T29603] ? ___might_sleep+0x163/0x280 [ 1006.527810][T29603] __should_failslab+0x121/0x190 [ 1006.527832][T29603] should_failslab+0x9/0x14 [ 1006.527850][T29603] kmem_cache_alloc_node+0x268/0x740 [ 1006.538490][T29603] __alloc_skb+0xd5/0x5e0 [ 1006.547900][T29603] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1006.547919][T29603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1006.547933][T29603] ? netlink_autobind.isra.0+0x228/0x310 [ 1006.547953][T29603] netlink_sendmsg+0x972/0xd60 [ 1006.568847][T29603] ? netlink_unicast+0x710/0x710 [ 1006.568862][T29603] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1006.568880][T29603] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1006.584202][T29603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1006.584218][T29603] ? security_socket_sendmsg+0x8d/0xc0 [ 1006.584233][T29603] ? netlink_unicast+0x710/0x710 [ 1006.584248][T29603] sock_sendmsg+0xd7/0x130 [ 1006.584269][T29603] ___sys_sendmsg+0x803/0x920 [ 1006.621045][T29603] ? copy_msghdr_from_user+0x440/0x440 [ 1006.626633][T29603] ? __kasan_check_read+0x11/0x20 [ 1006.631681][T29603] ? __fget+0x384/0x560 [ 1006.635864][T29603] ? ksys_dup3+0x3e0/0x3e0 [ 1006.640313][T29603] ? __fget_light+0x1a9/0x230 14:41:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffb1, &(0x7f0000000000)) 14:41:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='!', 0x1, r0) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x100000, 0x0) write(r3, &(0x7f0000000140)="0872676b4659c57dd1426caec4becb46b0a6cb582c8dc760fd559d2465c91fda159b6e56eef56f81930509a190dbad674009001602467a719331bba68fb0e821ba5b4140c82380e2c5", 0x49) 14:41:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00000002, &(0x7f0000000000)) [ 1006.645017][T29603] ? __fdget+0x1b/0x20 [ 1006.649109][T29603] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1006.655376][T29603] __sys_sendmsg+0x105/0x1d0 [ 1006.659983][T29603] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1006.665053][T29603] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1006.670567][T29603] ? do_syscall_64+0x26/0x760 [ 1006.675261][T29603] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.681343][T29603] ? do_syscall_64+0x26/0x760 [ 1006.686045][T29603] __x64_sys_sendmsg+0x78/0xb0 [ 1006.690824][T29603] do_syscall_64+0xfa/0x760 [ 1006.695348][T29603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.701370][T29603] RIP: 0033:0x459a09 [ 1006.705277][T29603] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1006.705285][T29603] RSP: 002b:00007ff2bcdeac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.705297][T29603] RAX: ffffffffffffffda RBX: 00007ff2bcdeac90 RCX: 0000000000459a09 14:41:51 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x100000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1006.705306][T29603] RDX: 0000000000000000 RSI: 0000000020009200 RDI: 0000000000000003 [ 1006.705313][T29603] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1006.705326][T29603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2bcdeb6d4 [ 1006.765328][T29603] R13: 00000000004c7933 R14: 00000000004dd328 R15: 0000000000000007 [ 1006.805610][T29599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:41:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0xfffffffffffffffe) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$netlink(r0, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xe}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40004}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xfffffe80) 14:41:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0xfffffe) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)={r5, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYBLOB="070001000400d7b04045b899cf01002af9fa24d017e659098ca63ab2d3ce88325ab914a40c94509c33555d1dc22227bd97110bdf19a70fa526b9f4928c57bbb1cae0000000000000b0fba7df5f35337ab5a18845d4b062d2e70c98da49a6aea8a88c3d79595624ae1c266fea52b8c15b73cf0a643099d297249a4e77c131976c559cb016c95163ab21c903000000864ed56284f8b918e485fc7d3529f854f9f826eaa90400000000000000eb5fc623605cbe7aa3ae385d9513df195e7e91ed6c2d5adf546dcdfb0b2f34a969bd708c19b3a507f8bd7126d93d5bf3425a5b3941494134c010095693513bbaccc044f62b378cb56a4652c8f4babba6dea5c383c17e897c3077a1e9663ada3016fbc481a5c8b3231dad88334b12258eb25ea252b60000000000000000aa0ee5d5eb8afd7a3606a20fefe440c982ba530a82618b19f2854dbb8db38573a6f501013c9d614c8a900e082e4b2d05244363d28a433dc63fe692608a94fc9b50bd438d307105acca2f7a"], &(0x7f0000000080)=0xa) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x100000000, 0x4, 0x1, 0x6, 0x2, 0x101, 0x7092, r6}, &(0x7f0000000100)=0x20) 14:41:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00000010, &(0x7f0000000000)) 14:41:51 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x200000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:51 executing program 5 (fault-call:8 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 1006.992144][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1007.091988][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:41:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0xb5, 0x4) 14:41:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00002401, &(0x7f0000000000)) [ 1007.176666][T29804] FAULT_INJECTION: forcing a failure. [ 1007.176666][T29804] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.243436][T29804] CPU: 1 PID: 29804 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 1007.251034][T29804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.261116][T29804] Call Trace: [ 1007.264423][T29804] dump_stack+0x172/0x1f0 [ 1007.268780][T29804] should_fail.cold+0xa/0x15 [ 1007.273402][T29804] ? fault_create_debugfs_attr+0x180/0x180 [ 1007.279232][T29804] ? ___might_sleep+0x163/0x280 [ 1007.284103][T29804] __should_failslab+0x121/0x190 [ 1007.289053][T29804] should_failslab+0x9/0x14 [ 1007.293565][T29804] kmem_cache_alloc_node_trace+0x274/0x750 [ 1007.299390][T29804] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1007.305376][T29804] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1007.305399][T29804] __kmalloc_node_track_caller+0x3d/0x70 [ 1007.305416][T29804] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1007.305433][T29804] __alloc_skb+0x10b/0x5e0 [ 1007.326622][T29804] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1007.326641][T29804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1007.326656][T29804] ? netlink_autobind.isra.0+0x228/0x310 [ 1007.326677][T29804] netlink_sendmsg+0x972/0xd60 [ 1007.326699][T29804] ? netlink_unicast+0x710/0x710 [ 1007.326712][T29804] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1007.326729][T29804] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1007.326749][T29804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1007.370587][T29804] ? security_socket_sendmsg+0x8d/0xc0 [ 1007.376065][T29804] ? netlink_unicast+0x710/0x710 [ 1007.381008][T29804] sock_sendmsg+0xd7/0x130 [ 1007.385423][T29804] ___sys_sendmsg+0x803/0x920 14:41:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00002405, &(0x7f0000000000)) 14:41:51 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x300000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1007.385439][T29804] ? copy_msghdr_from_user+0x440/0x440 [ 1007.385464][T29804] ? __kasan_check_read+0x11/0x20 [ 1007.385482][T29804] ? __fget+0x384/0x560 [ 1007.385502][T29804] ? ksys_dup3+0x3e0/0x3e0 [ 1007.385526][T29804] ? __fget_light+0x1a9/0x230 [ 1007.385548][T29804] ? __fdget+0x1b/0x20 [ 1007.417977][T29804] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1007.424243][T29804] __sys_sendmsg+0x105/0x1d0 [ 1007.428851][T29804] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1007.433907][T29804] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1007.439384][T29804] ? do_syscall_64+0x26/0x760 14:41:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00004b31, &(0x7f0000000000)) [ 1007.444076][T29804] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1007.450167][T29804] ? do_syscall_64+0x26/0x760 [ 1007.454865][T29804] __x64_sys_sendmsg+0x78/0xb0 [ 1007.459645][T29804] do_syscall_64+0xfa/0x760 [ 1007.464169][T29804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1007.470067][T29804] RIP: 0033:0x459a09 [ 1007.473974][T29804] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:41:51 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x400000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x4010) 14:41:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) [ 1007.493586][T29804] RSP: 002b:00007ff2bce0bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.502019][T29804] RAX: ffffffffffffffda RBX: 00007ff2bce0bc90 RCX: 0000000000459a09 [ 1007.510002][T29804] RDX: 0000000000000000 RSI: 0000000020009200 RDI: 0000000000000003 [ 1007.517986][T29804] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1007.525972][T29804] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2bce0c6d4 [ 1007.533961][T29804] R13: 00000000004c7933 R14: 00000000004dd328 R15: 0000000000000007 14:41:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00004b36, &(0x7f0000000000)) [ 1007.614804][T30057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:41:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f000085dff0), 0xe459096532dfdc6) 14:41:52 executing program 5 (fault-call:8 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:52 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x500000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xffffffffffffff87) 14:41:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00004b66, &(0x7f0000000000)) 14:41:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0xac, 0x0, 0x0}) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) 14:41:52 executing program 0: io_setup(0x1, &(0x7f0000000140)=0x0) r1 = socket(0x2, 0x803, 0x7f) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r4, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="2c00000005d15e0f5b06f1086a3855fc8acc9e00005c2d06b2a7febe1853703830395b38cc142b0da857cbc782ae0662"], &(0x7f00000001c0)=0x34) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x114f) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x379}]) 14:41:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00004c01, &(0x7f0000000000)) 14:41:52 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x600000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4f4, 0x0) getsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1008.152352][T30316] FAULT_INJECTION: forcing a failure. [ 1008.152352][T30316] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.205934][T30316] CPU: 1 PID: 30316 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 1008.213560][T30316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.223886][T30316] Call Trace: [ 1008.227228][T30316] dump_stack+0x172/0x1f0 [ 1008.231582][T30316] should_fail.cold+0xa/0x15 [ 1008.236192][T30316] ? fault_create_debugfs_attr+0x180/0x180 [ 1008.242019][T30316] ? ___might_sleep+0x163/0x280 [ 1008.246897][T30316] __should_failslab+0x121/0x190 [ 1008.251848][T30316] should_failslab+0x9/0x14 14:41:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x44}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x6000}}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61]}}, &(0x7f00000001c0)=""/140, 0x4f, 0x8c, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x2400, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="91", 0x1, 0x3000c411, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280)=0x8001, 0x4) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) 14:41:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00004c80, &(0x7f0000000000)) [ 1008.256378][T30316] kmem_cache_alloc_node_trace+0x274/0x750 [ 1008.262193][T30316] ? refcount_sub_and_test_checked+0x154/0x200 [ 1008.268375][T30316] ? lock_downgrade+0x920/0x920 [ 1008.273238][T30316] __kmalloc_node+0x3d/0x70 [ 1008.277857][T30316] qdisc_alloc+0xbb/0xa90 [ 1008.282196][T30316] ? do_raw_read_unlock+0x3f/0x70 [ 1008.287234][T30316] ? _raw_read_unlock+0x2d/0x50 [ 1008.292101][T30316] qdisc_create+0xec/0x1210 [ 1008.296638][T30316] ? tc_get_qdisc+0xc10/0xc10 [ 1008.301331][T30316] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1008.307180][T30316] ? qdisc_match_from_root+0x18a/0x280 [ 1008.312647][T30316] tc_modify_qdisc+0x524/0x1c50 [ 1008.317505][T30316] ? qdisc_create+0x1210/0x1210 [ 1008.317544][T30316] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1008.317559][T30316] ? qdisc_create+0x1210/0x1210 [ 1008.317634][T30316] rtnetlink_rcv_msg+0x463/0xb00 [ 1008.317654][T30316] ? rtnetlink_put_metrics+0x580/0x580 [ 1008.343959][T30316] ? lock_downgrade+0x920/0x920 [ 1008.348849][T30316] ? netlink_deliver_tap+0x22d/0xbf0 [ 1008.354147][T30316] ? find_held_lock+0x35/0x130 [ 1008.358925][T30316] netlink_rcv_skb+0x177/0x450 [ 1008.358946][T30316] ? rtnetlink_put_metrics+0x580/0x580 [ 1008.369156][T30316] ? netlink_ack+0xb30/0xb30 [ 1008.373757][T30316] ? __kasan_check_read+0x11/0x20 [ 1008.378790][T30316] ? netlink_deliver_tap+0x254/0xbf0 [ 1008.384078][T30316] rtnetlink_rcv+0x1d/0x30 [ 1008.388494][T30316] netlink_unicast+0x531/0x710 [ 1008.393275][T30316] ? netlink_attachskb+0x7c0/0x7c0 [ 1008.394336][ C0] net_ratelimit: 22 callbacks suppressed [ 1008.394343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.398389][T30316] ? _copy_from_iter_full+0x25d/0x8a0 [ 1008.398405][T30316] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1008.398424][T30316] ? __check_object_size+0x3d/0x437 [ 1008.404086][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.409752][T30316] netlink_sendmsg+0x8a5/0xd60 [ 1008.409773][T30316] ? netlink_unicast+0x710/0x710 [ 1008.409790][T30316] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1008.446955][T30316] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1008.452430][T30316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1008.458683][T30316] ? security_socket_sendmsg+0x8d/0xc0 [ 1008.464150][T30316] ? netlink_unicast+0x710/0x710 [ 1008.469098][T30316] sock_sendmsg+0xd7/0x130 [ 1008.473525][T30316] ___sys_sendmsg+0x803/0x920 [ 1008.478215][T30316] ? copy_msghdr_from_user+0x440/0x440 [ 1008.483708][T30316] ? __kasan_check_read+0x11/0x20 [ 1008.488752][T30316] ? __fget+0x384/0x560 [ 1008.492922][T30316] ? ksys_dup3+0x3e0/0x3e0 [ 1008.497353][T30316] ? __fget_light+0x1a9/0x230 [ 1008.502041][T30316] ? __fdget+0x1b/0x20 14:41:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005421, &(0x7f0000000000)) [ 1008.506122][T30316] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1008.512380][T30316] __sys_sendmsg+0x105/0x1d0 [ 1008.516984][T30316] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1008.522033][T30316] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1008.527519][T30316] ? do_syscall_64+0x26/0x760 [ 1008.532211][T30316] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1008.538289][T30316] ? do_syscall_64+0x26/0x760 [ 1008.538312][T30316] __x64_sys_sendmsg+0x78/0xb0 [ 1008.538329][T30316] do_syscall_64+0xfa/0x760 [ 1008.538348][T30316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1008.538359][T30316] RIP: 0033:0x459a09 [ 1008.538373][T30316] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1008.538381][T30316] RSP: 002b:00007ff2bcdc9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1008.538395][T30316] RAX: ffffffffffffffda RBX: 00007ff2bcdc9c90 RCX: 0000000000459a09 [ 1008.538404][T30316] RDX: 0000000000000000 RSI: 0000000020009200 RDI: 0000000000000003 [ 1008.538412][T30316] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1008.538425][T30316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2bcdca6d4 [ 1008.622331][T30316] R13: 00000000004c7933 R14: 00000000004dd328 R15: 0000000000000007 [ 1008.630713][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.636562][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:53 executing program 5 (fault-call:8 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005423, &(0x7f0000000000)) 14:41:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x6, 0x6, 0x4, 0x2000000, {}, {0x0, 0x8, 0x4, 0x8, 0x2b800000, 0x2, "77c54718"}, 0x13c, 0x1, @userptr=0x100000000, 0x4}) 14:41:53 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x700000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:53 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3, 0x0, 0x0, 0x1, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000280)={0x7f, 0x6, 0x5}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x121, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48851) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x797e}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x801) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000040)={0x0, {0x0, 0x1c9c380}}) 14:41:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x8b4}}, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0xd9f, 0xae6e, 0x2, 0x8, 0x2311, 0xffffffffffffffff, 0x4, 0x81, 0xe57, 0x200, 0xfff, 0x5, 0x4}, {0x1, 0x800, 0xd3d, 0x7f, 0x57, 0x1, 0x5, 0x0, 0x1ff, 0x1, 0xff, 0x0, 0x9}, {0x8000, 0x9, 0x7ff, 0x1, 0x9, 0x3, 0xa9e, 0x7, 0x8, 0x4, 0x0, 0x640b, 0x9}], 0x100000001}) 14:41:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005425, &(0x7f0000000000)) 14:41:53 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x2000000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1009.080682][T30704] FAULT_INJECTION: forcing a failure. [ 1009.080682][T30704] name failslab, interval 1, probability 0, space 0, times 0 14:41:53 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2000, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x18, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffc, 0x81, 0x0, 0x2, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x440001) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="721d95d2", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x0, 0xffffffffffff0000, 0x0, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000007c0)={r3, 0x1000, "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"}, &(0x7f0000000380)=0x1008) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) semget(0x0, 0x0, 0x20) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) ioctl$void(r4, 0x5451) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x11e}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8000, 0x4}, &(0x7f00000005c0)=0x90) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000240)={0x3, 0x1, [0x0, 0x32d4, 0x0, 0x664, 0x400, 0x100000001, 0x10000, 0xffff]}) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/19, 0x13}], 0x1, 0x0) [ 1009.154609][T30704] CPU: 1 PID: 30704 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 1009.162208][T30704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.172288][T30704] Call Trace: [ 1009.175605][T30704] dump_stack+0x172/0x1f0 [ 1009.179965][T30704] should_fail.cold+0xa/0x15 [ 1009.184592][T30704] ? fault_create_debugfs_attr+0x180/0x180 [ 1009.190433][T30704] ? ___might_sleep+0x163/0x280 [ 1009.195410][T30704] __should_failslab+0x121/0x190 [ 1009.200368][T30704] should_failslab+0x9/0x14 [ 1009.204881][T30704] kmem_cache_alloc_trace+0x2d3/0x790 [ 1009.210260][T30704] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1009.216427][T30704] ? __kmalloc_node+0x3d/0x70 [ 1009.221121][T30704] tcf_block_get_ext+0x886/0x16a0 [ 1009.226157][T30704] tcf_block_get+0xb9/0x100 [ 1009.230665][T30704] ? tcf_block_get_ext+0x16a0/0x16a0 [ 1009.235956][T30704] ? walker_check_empty+0x70/0x70 [ 1009.241062][T30704] sfb_init+0x36/0xa7 [ 1009.241078][T30704] ? sfb_change+0xe90/0xe90 [ 1009.249553][T30704] qdisc_create+0x4ee/0x1210 14:41:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005433, &(0x7f0000000000)) 14:41:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstatfs(r1, &(0x7f0000000000)=""/52) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 1009.254163][T30704] ? tc_get_qdisc+0xc10/0xc10 [ 1009.258855][T30704] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1009.264583][T30704] ? qdisc_match_from_root+0x18a/0x280 [ 1009.270052][T30704] tc_modify_qdisc+0x524/0x1c50 [ 1009.270081][T30704] ? qdisc_create+0x1210/0x1210 [ 1009.279794][T30704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1009.286049][T30704] ? qdisc_create+0x1210/0x1210 [ 1009.290914][T30704] rtnetlink_rcv_msg+0x463/0xb00 [ 1009.295868][T30704] ? rtnetlink_put_metrics+0x580/0x580 14:41:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r3, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r4 = dup3(r2, r3, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r4, 0x1) [ 1009.301384][T30704] ? lock_downgrade+0x920/0x920 [ 1009.301403][T30704] ? netlink_deliver_tap+0x22d/0xbf0 [ 1009.301418][T30704] ? find_held_lock+0x35/0x130 [ 1009.301439][T30704] netlink_rcv_skb+0x177/0x450 14:41:53 executing program 5 (fault-call:8 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:53 executing program 4: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) 14:41:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005450, &(0x7f0000000000)) [ 1009.301456][T30704] ? rtnetlink_put_metrics+0x580/0x580 [ 1009.301471][T30704] ? netlink_ack+0xb30/0xb30 [ 1009.301485][T30704] ? __kasan_check_read+0x11/0x20 14:41:54 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x4000000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1009.301505][T30704] ? netlink_deliver_tap+0x254/0xbf0 14:41:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 1009.301525][T30704] rtnetlink_rcv+0x1d/0x30 [ 1009.301538][T30704] netlink_unicast+0x531/0x710 [ 1009.301556][T30704] ? netlink_attachskb+0x7c0/0x7c0 [ 1009.301568][T30704] ? _copy_from_iter_full+0x25d/0x8a0 [ 1009.301582][T30704] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1009.301594][T30704] ? __check_object_size+0x3d/0x437 [ 1009.301609][T30704] netlink_sendmsg+0x8a5/0xd60 [ 1009.301625][T30704] ? netlink_unicast+0x710/0x710 [ 1009.301636][T30704] ? aa_sock_msg_perm.isra.0+0xba/0x170 14:41:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005451, &(0x7f0000000000)) [ 1009.301649][T30704] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1009.301660][T30704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1009.301670][T30704] ? security_socket_sendmsg+0x8d/0xc0 [ 1009.301680][T30704] ? netlink_unicast+0x710/0x710 [ 1009.301693][T30704] sock_sendmsg+0xd7/0x130 [ 1009.301705][T30704] ___sys_sendmsg+0x803/0x920 [ 1009.301718][T30704] ? copy_msghdr_from_user+0x440/0x440 [ 1009.301736][T30704] ? __kasan_check_read+0x11/0x20 [ 1009.301752][T30704] ? __fget+0x384/0x560 [ 1009.301774][T30704] ? ksys_dup3+0x3e0/0x3e0 [ 1009.301793][T30704] ? __fget_light+0x1a9/0x230 [ 1009.301805][T30704] ? __fdget+0x1b/0x20 [ 1009.301815][T30704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1009.301830][T30704] __sys_sendmsg+0x105/0x1d0 [ 1009.301841][T30704] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1009.301864][T30704] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1009.301875][T30704] ? do_syscall_64+0x26/0x760 [ 1009.301887][T30704] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.301897][T30704] ? do_syscall_64+0x26/0x760 [ 1009.301911][T30704] __x64_sys_sendmsg+0x78/0xb0 [ 1009.301923][T30704] do_syscall_64+0xfa/0x760 [ 1009.301938][T30704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.301947][T30704] RIP: 0033:0x459a09 [ 1009.301958][T30704] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.301964][T30704] RSP: 002b:00007ff2bcdeac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.301975][T30704] RAX: ffffffffffffffda RBX: 00007ff2bcdeac90 RCX: 0000000000459a09 [ 1009.301981][T30704] RDX: 0000000000000000 RSI: 0000000020009200 RDI: 0000000000000003 [ 1009.301987][T30704] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1009.301994][T30704] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2bcdeb6d4 [ 1009.302000][T30704] R13: 00000000004c7933 R14: 00000000004dd328 R15: 0000000000000007 [ 1009.302316][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.302355][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.302413][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:41:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005452, &(0x7f0000000000)) 14:41:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'ro;Y0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="f0c32abd7000d9dbdf250300000014000200080004000800000008000400000000003c110200080004000000000008000400ff03000008000b000200000008000601040000000000000007000000080008000500002008000900003500000800050003000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000800}, 0x8b38c1f1781768e9) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcff1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x3c3a03677a2c7a2b) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000100)=""/181) r5 = gettid() tkill(r5, 0x1000000000015) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x10) kcmp$KCMP_EPOLL_TFD(r5, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x6}) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) [ 1009.302443][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.684311][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.684380][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1010.083271][T31248] FAULT_INJECTION: forcing a failure. [ 1010.083271][T31248] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.159609][T31248] CPU: 1 PID: 31248 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 1010.167203][T31248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.177268][T31248] Call Trace: [ 1010.177295][T31248] dump_stack+0x172/0x1f0 [ 1010.177322][T31248] should_fail.cold+0xa/0x15 [ 1010.177342][T31248] ? fault_create_debugfs_attr+0x180/0x180 [ 1010.177362][T31248] ? ___might_sleep+0x163/0x280 [ 1010.177385][T31248] __should_failslab+0x121/0x190 [ 1010.205142][T31248] should_failslab+0x9/0x14 [ 1010.209649][T31248] kmem_cache_alloc_trace+0x2d3/0x790 [ 1010.209677][T31248] tcf_block_get_ext+0x153/0x16a0 [ 1010.209700][T31248] tcf_block_get+0xb9/0x100 [ 1010.224609][T31248] ? tcf_block_get_ext+0x16a0/0x16a0 [ 1010.224629][T31248] ? walker_check_empty+0x70/0x70 [ 1010.224653][T31248] sfb_init+0x36/0xa7 [ 1010.224665][T31248] ? sfb_change+0xe90/0xe90 [ 1010.224681][T31248] qdisc_create+0x4ee/0x1210 [ 1010.224702][T31248] ? tc_get_qdisc+0xc10/0xc10 [ 1010.224719][T31248] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1010.224731][T31248] ? qdisc_match_from_root+0x18a/0x280 [ 1010.224750][T31248] tc_modify_qdisc+0x524/0x1c50 [ 1010.224778][T31248] ? qdisc_create+0x1210/0x1210 [ 1010.224812][T31248] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1010.252801][T31248] ? qdisc_create+0x1210/0x1210 [ 1010.285139][T31248] rtnetlink_rcv_msg+0x463/0xb00 [ 1010.290099][T31248] ? rtnetlink_put_metrics+0x580/0x580 [ 1010.295570][T31248] ? lock_downgrade+0x920/0x920 [ 1010.300441][T31248] ? netlink_deliver_tap+0x22d/0xbf0 [ 1010.305823][T31248] ? find_held_lock+0x35/0x130 [ 1010.310603][T31248] netlink_rcv_skb+0x177/0x450 [ 1010.315378][T31248] ? rtnetlink_put_metrics+0x580/0x580 [ 1010.320834][T31248] ? netlink_ack+0xb30/0xb30 [ 1010.325428][T31248] ? __kasan_check_read+0x11/0x20 [ 1010.330458][T31248] ? netlink_deliver_tap+0x254/0xbf0 [ 1010.335763][T31248] rtnetlink_rcv+0x1d/0x30 [ 1010.340198][T31248] netlink_unicast+0x531/0x710 [ 1010.344986][T31248] ? netlink_attachskb+0x7c0/0x7c0 [ 1010.350100][T31248] ? _copy_from_iter_full+0x25d/0x8a0 [ 1010.355482][T31248] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1010.361216][T31248] ? __check_object_size+0x3d/0x437 [ 1010.366432][T31248] netlink_sendmsg+0x8a5/0xd60 [ 1010.371210][T31248] ? netlink_unicast+0x710/0x710 [ 1010.376150][T31248] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1010.381707][T31248] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1010.387255][T31248] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1010.393503][T31248] ? security_socket_sendmsg+0x8d/0xc0 [ 1010.398970][T31248] ? netlink_unicast+0x710/0x710 [ 1010.403924][T31248] sock_sendmsg+0xd7/0x130 [ 1010.408345][T31248] ___sys_sendmsg+0x803/0x920 [ 1010.413036][T31248] ? copy_msghdr_from_user+0x440/0x440 [ 1010.418525][T31248] ? __kasan_check_read+0x11/0x20 [ 1010.423615][T31248] ? __fget+0x384/0x560 [ 1010.427786][T31248] ? ksys_dup3+0x3e0/0x3e0 [ 1010.432217][T31248] ? __fget_light+0x1a9/0x230 [ 1010.436905][T31248] ? __fdget+0x1b/0x20 [ 1010.440988][T31248] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1010.447238][T31248] __sys_sendmsg+0x105/0x1d0 [ 1010.451837][T31248] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1010.456904][T31248] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1010.462523][T31248] ? do_syscall_64+0x26/0x760 [ 1010.467200][T31248] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.473366][T31248] ? do_syscall_64+0x26/0x760 [ 1010.478048][T31248] __x64_sys_sendmsg+0x78/0xb0 [ 1010.482813][T31248] do_syscall_64+0xfa/0x760 [ 1010.487319][T31248] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.493219][T31248] RIP: 0033:0x459a09 [ 1010.497111][T31248] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.516826][T31248] RSP: 002b:00007ff2bcdc9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.525245][T31248] RAX: ffffffffffffffda RBX: 00007ff2bcdc9c90 RCX: 0000000000459a09 [ 1010.533210][T31248] RDX: 0000000000000000 RSI: 0000000020009200 RDI: 0000000000000003 [ 1010.541164][T31248] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1010.549129][T31248] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2bcdca6d4 14:41:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x8b4}}, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0xd9f, 0xae6e, 0x2, 0x8, 0x2311, 0xffffffffffffffff, 0x4, 0x81, 0xe57, 0x200, 0xfff, 0x5, 0x4}, {0x1, 0x800, 0xd3d, 0x7f, 0x57, 0x1, 0x5, 0x0, 0x1ff, 0x1, 0xff, 0x0, 0x9}, {0x8000, 0x9, 0x7ff, 0x1, 0x9, 0x3, 0xa9e, 0x7, 0x8, 0x4, 0x0, 0x640b, 0x9}], 0x100000001}) 14:41:54 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x4003000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x10b000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) 14:41:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005460, &(0x7f0000000000)) [ 1010.557103][T31248] R13: 00000000004c7933 R14: 00000000004dd328 R15: 0000000000000007 14:41:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005501, &(0x7f0000000000)) 14:41:55 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x4500000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xb4) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11dca50d5e") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={r3, @remote, @remote}, 0xc) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) 14:41:55 executing program 2: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x10, &(0x7f0000000000)={&(0x7f0000000140)=""/169, 0xa9, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x80000001}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000300)={r4, 0x5, 0x10, 0x4, 0xffffffffffffc42e}, &(0x7f0000000340)=0x18) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:55 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x6000000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00005646, &(0x7f0000000000)) [ 1010.942488][T31417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:41:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) 14:41:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:57 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x7500000000000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00006364, &(0x7f0000000000)) 14:41:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x5011c0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = creat(&(0x7f0000000780)='./file0/../file0\x00', 0x1) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000007c0)) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r3 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0x80, 0x7ff, 0x6, 0x7, 0x0, 0x3, 0x1000, 0x8, 0x6, 0x9, 0xf263, 0x8, 0x6, 0x9, 0x9, 0x3, 0x800, 0x2, 0x4c, 0x4, 0x4, 0x3ff, 0xcb, 0x9, 0x4, 0x40, 0x6, 0xefd, 0x10001, 0x1000, 0x7fffffff, 0xffffffff, 0x8, 0x3, 0x4, 0xe19, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000240), 0x1b}, 0x3018, 0x6, 0x1000, 0xa, 0x0, 0x2, 0x6}, r4, 0xc, 0xffffffffffffffff, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000900)=0xfffffffffffffe69) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000700)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1400f9c12b78fa7b000000050001003dd76c0200000006f6a9663f0c6f381455c1e9281934394f0b26aa69125b323e330347846c559886ee930facb1e551c7397100005b8a225f22df40592ea9057ec976a8566e64663109"], 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000740)=0x3f, 0x8) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000580)={0x3, &(0x7f00000003c0)=[{0xd0, 0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x1, 0x100000001, 0x7ff}, {0x3, 0x2, 0x8, 0x200}]}, 0x10) r8 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540)=0x0, &(0x7f00000006c0)) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000940)={0x2, 0x4, 0xa96, 0x9, 0x5, 0x3ff}) keyctl$chown(0x4, r8, r9, r10) fchown(r0, r5, r10) r11 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r12 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r12, r11, r12}, &(0x7f0000000280)=""/250, 0x223, &(0x7f0000000580)={&(0x7f0000000080)={'sha256-generic\x00'}}) r13 = request_key(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='GPL\x00', 0x0) keyctl$link(0x8, r11, r13) add_key(&(0x7f00000009c0)='rxrpc\x00', &(0x7f0000000a00)={'syz', 0x3}, &(0x7f0000000a40)="6ee82e8f3ca601dc44e8b6f2c9ca079dfaa343f4bab6fa3f17b570e8b4b4b60992e38d7772898bdf1d42b9c4b07239af52dd23f8f346e3f8fd13d4", 0x3b, r13) 14:41:57 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000dc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000004eba56f9372a568616948f01c35dbf0935b18decb4f4008166b5564bc36003dae1c900afe211fe5f785a4900cf19a56994832e67a19e612fef8e9266a06fcb86e5f95a0ebfec5fda363771a0cb330799de54a97eea4ae90cc658aa40bc572035514c32ba9025815bd08d80666d83475cf0f6d8e7de8b1fe149523dcaeac7931a2df6d3b7bd4001a35c3857ebc8f79eab5d12b9fcfcc471bcabe12475b625d130eeefb14f932fa5b6c6a3df14d52468641d4a0f49ff8d1123646f4255ecda20a05f499d12e5a6baed156e8f265b06946de7581c7503407c97dd16ed3e9c9a69ab153595b0455a767da5139cbb43a7edc2c89274b8a38fd1b8dc747fab7b3c96e1399a35c99c0f00bae174a7c01a601047cdac3ac61d7f4785f0d6d297"], &(0x7f0000000400)=0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xffffffffffffffff, 0xa}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000000c0)={0x1, {r3, r4+30000000}, 0x7f, 0x5}) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x1fe, 0xf0d8, 0x80000000, 0x0, 0xa5}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x14d114775de95e04, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x200, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x3, "a11fd9bb777ed6d2de013aa84c1780812dde64019c3679140f98742d991c188999137e2c0c273c01ce5ee4a98e9a5f9621977495adc63b5e42cfed5f869c9b9c3762653da39cff6f836d3d8c2f820218e7f36d69edfe4f612f003ba171580d5d229a27995ec89a2ae6ea35537a994f882cb14b30ea1e81f4ffce42d406d795b1667439abc3912178aa17fed740c80915b5df43ad2e40db2e0c07023314ebb582148f97bf4b7f329a3f160dfa8dc19707f955096b143bd08da435072e87ba883dfc7fec35c82353166a54e432bd274068adc33e99bed553bae5b0410241e3d969c47980bfb66acc42eae3297dadf62b3f5d48f2bbbae626416b7f89ba77f540b4", 0xb9, 0x4, 0x0, 0x2, 0x100000000, 0x1, 0x3}, r6}}, 0x128) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18080080}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000c00)={r7, 0x3}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000180)='ppp1\x00'}, 0x30) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780)='/dev/zero\x00', 0x80, 0x0) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r10, 0x100000000}) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r11, 0xe, 0xffffffffffffffff, 0x4) fcntl$getownex(r11, 0x10, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000180)='ppp1\x00'}, 0x30) openat$zero(0xffffffffffffff9c, &(0x7f0000000780)='/dev/zero\x00', 0x80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000180)='ppp1\x00'}, 0x30) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780)='/dev/zero\x00', 0x80, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r12, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r13, 0x100000000}) r14 = getpgrp(0x0) setpriority(0x0, r14, 0xffff) r15 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x2000000000000000}, r15, 0xe, 0xffffffffffffffff, 0x4) fcntl$notify(r15, 0x402, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000c80)='TIPC\x00') stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000d40)) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 14:41:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00006609, &(0x7f0000000000)) 14:41:57 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0x8dffffff00000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:41:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x80000, 0x0, [0x1, 0x2, 0x4, 0x81, 0x78, 0x20, 0x1887, 0x8]}) 14:41:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x10', 0x200, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:41:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff0000890b, &(0x7f0000000000)) [ 1013.434274][ C1] net_ratelimit: 18 callbacks suppressed [ 1013.434282][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.440017][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1013.440108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.457377][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:41:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x801000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffec8, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) [ 1013.563354][T31722] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:935 [ 1013.573111][T31722] in_atomic(): 1, irqs_disabled(): 0, pid: 31722, name: syz-executor.5 [ 1013.581436][T31722] 2 locks held by syz-executor.5/31722: [ 1013.587057][T31722] #0: ffffffff8999f9e0 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 1013.596008][T31722] #1: ffff88809866aa80 (&(&sch->q.lock)->rlock){+.-.}, at: sfb_change+0x257/0xe90 [ 1013.596081][T31722] Preemption disabled at: [ 1013.596094][T31722] [] sfb_change+0x257/0xe90 [ 1013.596118][T31722] CPU: 1 PID: 31722 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 1013.623341][T31722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.633405][T31722] Call Trace: [ 1013.633427][T31722] dump_stack+0x172/0x1f0 [ 1013.633446][T31722] ? sfb_change+0x257/0xe90 [ 1013.633465][T31722] ___might_sleep.cold+0x1be/0x1f7 [ 1013.650687][T31722] __might_sleep+0x95/0x190 [ 1013.655200][T31722] __mutex_lock+0xc5/0x13c0 14:41:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e20, 0x2, @ipv4={[], [], @multicast2}, 0x6}, {0xa, 0x4e24, 0x3, @loopback, 0x3}, 0x800, [0x101, 0xffffffffffffffc0, 0x8, 0x40, 0x7fff, 0x1, 0x6, 0x548451c5]}, 0x5c) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xa) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ipx, &(0x7f0000000100)=0x39) [ 1013.655217][T31722] ? debug_smp_processor_id+0x3c/0x214 [ 1013.655236][T31722] ? tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 1013.655253][T31722] ? save_stack+0x5c/0x90 [ 1013.655264][T31722] ? save_stack+0x23/0x90 [ 1013.655277][T31722] ? mutex_lock_io_nested+0x1260/0x1260 [ 1013.655295][T31722] ? fifo_set_limit+0x1a9/0x210 [ 1013.665266][T31722] ? fifo_create_dflt+0x90/0xf0 [ 1013.695784][T31722] ? sfb_change+0x18d/0xe90 [ 1013.695802][T31722] ? tc_modify_qdisc+0xfcf/0x1c50 [ 1013.695817][T31722] ? rtnetlink_rcv_msg+0x463/0xb00 14:41:58 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0xf5ffffff00000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:41:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00008912, &(0x7f0000000000)) [ 1013.695830][T31722] ? netlink_rcv_skb+0x177/0x450 [ 1013.695843][T31722] ? rtnetlink_rcv+0x1d/0x30 [ 1013.695853][T31722] ? netlink_unicast+0x531/0x710 [ 1013.695864][T31722] ? netlink_sendmsg+0x8a5/0xd60 [ 1013.695876][T31722] ? sock_sendmsg+0xd7/0x130 [ 1013.695888][T31722] ? ___sys_sendmsg+0x803/0x920 [ 1013.695907][T31722] ? __sys_sendmsg+0x105/0x1d0 [ 1013.695917][T31722] ? __x64_sys_sendmsg+0x78/0xb0 [ 1013.695937][T31722] ? do_syscall_64+0xfa/0x760 [ 1013.753667][T31722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1013.753691][T31722] ? __kasan_check_read+0x11/0x20 [ 1013.753708][T31722] ? mark_lock+0xc2/0x1220 [ 1013.753728][T31722] mutex_lock_nested+0x16/0x20 [ 1013.753742][T31722] ? mutex_lock_nested+0x16/0x20 [ 1013.753762][T31722] tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 1013.753778][T31722] ? __kasan_check_read+0x11/0x20 [ 1013.790443][T31722] ? mark_lock+0xc2/0x1220 [ 1013.794868][T31722] tcf_block_put_ext.part.0+0x2a/0x80 [ 1013.800255][T31722] tcf_block_put+0xbf/0x110 [ 1013.804779][T31722] ? tcf_block_put_ext+0x40/0x40 [ 1013.809733][T31722] ? sfb_destroy+0x80/0x80 [ 1013.814171][T31722] ? sfb_destroy+0x80/0x80 [ 1013.818595][T31722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1013.824855][T31722] ? prandom_u32+0x7d/0xb0 [ 1013.829299][T31722] ? sfb_zero_all_buckets+0x20/0x20 [ 1013.834501][T31722] sfb_destroy+0x37/0x80 [ 1013.838751][T31722] qdisc_destroy+0x11f/0x630 [ 1013.843361][T31722] qdisc_put+0x85/0xa0 [ 1013.847449][T31722] sfb_change+0x3d8/0xe90 [ 1013.852411][T31722] ? __sanitizer_cov_trace_cmp4+0x10/0x20 [ 1013.858151][T31722] ? sfb_graft+0x5f0/0x5f0 [ 1013.862595][T31722] ? nla_strcmp+0xe3/0x120 [ 1013.867020][T31722] ? sfb_graft+0x5f0/0x5f0 [ 1013.871456][T31722] tc_modify_qdisc+0xfcf/0x1c50 [ 1013.876337][T31722] ? qdisc_create+0x1210/0x1210 [ 1013.881227][T31722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1013.887483][T31722] ? qdisc_create+0x1210/0x1210 [ 1013.892347][T31722] rtnetlink_rcv_msg+0x463/0xb00 [ 1013.897308][T31722] ? rtnetlink_put_metrics+0x580/0x580 [ 1013.902778][T31722] ? lock_downgrade+0x920/0x920 [ 1013.907644][T31722] ? netlink_deliver_tap+0x22d/0xbf0 [ 1013.912940][T31722] ? find_held_lock+0x35/0x130 [ 1013.917721][T31722] netlink_rcv_skb+0x177/0x450 [ 1013.922498][T31722] ? rtnetlink_put_metrics+0x580/0x580 [ 1013.927971][T31722] ? netlink_ack+0xb30/0xb30 [ 1013.932565][T31722] ? __kasan_check_read+0x11/0x20 [ 1013.937606][T31722] ? netlink_deliver_tap+0x254/0xbf0 [ 1013.942907][T31722] rtnetlink_rcv+0x1d/0x30 [ 1013.947331][T31722] netlink_unicast+0x531/0x710 [ 1013.952110][T31722] ? netlink_attachskb+0x7c0/0x7c0 [ 1013.957236][T31722] ? _copy_from_iter_full+0x25d/0x8a0 14:41:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff00008933, &(0x7f0000000000)) [ 1013.962619][T31722] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1013.968375][T31722] ? __check_object_size+0x3d/0x437 [ 1013.973678][T31722] netlink_sendmsg+0x8a5/0xd60 [ 1013.978461][T31722] ? netlink_unicast+0x710/0x710 [ 1013.983411][T31722] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1013.989072][T31722] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1013.994546][T31722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1014.000812][T31722] ? security_socket_sendmsg+0x8d/0xc0 [ 1014.006277][T31722] ? netlink_unicast+0x710/0x710 [ 1014.006293][T31722] sock_sendmsg+0xd7/0x130 [ 1014.006308][T31722] ___sys_sendmsg+0x803/0x920 [ 1014.006324][T31722] ? copy_msghdr_from_user+0x440/0x440 [ 1014.006349][T31722] ? __kasan_check_read+0x11/0x20 [ 1014.006367][T31722] ? __fget+0x384/0x560 [ 1014.006387][T31722] ? ksys_dup3+0x3e0/0x3e0 [ 1014.006416][T31722] ? __fget_light+0x1a9/0x230 [ 1014.044109][T31722] ? __fdget+0x1b/0x20 [ 1014.048192][T31722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1014.054458][T31722] __sys_sendmsg+0x105/0x1d0 [ 1014.059060][T31722] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1014.064196][T31722] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1014.069666][T31722] ? do_syscall_64+0x26/0x760 [ 1014.074362][T31722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.080460][T31722] ? do_syscall_64+0x26/0x760 [ 1014.085158][T31722] __x64_sys_sendmsg+0x78/0xb0 [ 1014.089956][T31722] do_syscall_64+0xfa/0x760 [ 1014.094480][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.100377][T31722] RIP: 0033:0x459a09 [ 1014.104269][T31722] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1014.104278][T31722] RSP: 002b:00007ff2bcdeac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.104291][T31722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 1014.104298][T31722] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 1014.104306][T31722] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1014.104314][T31722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2bcdeb6d4 [ 1014.104323][T31722] R13: 00000000004c7933 R14: 00000000004dd328 R15: 00000000ffffffff [ 1014.104466][T31722] [ 1014.174728][T31722] ===================================================== [ 1014.176257][T31993] kobject: 'nfs_client' (0000000055bed03d): kobject_add_internal: parent: 'net', set: 'nfs' [ 1014.181654][T31722] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1014.181663][T31722] 5.3.0+ #0 Tainted: G W [ 1014.181666][T31722] ----------------------------------------------------- [ 1014.181680][T31722] syz-executor.5/31722 [HC0[0]:SC0[2]:HE1:SE0] is trying to acquire: [ 1014.181685][T31722] ffff8880a9a053a0 (&block->lock){+.+.}, at: tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 1014.181727][T31722] [ 1014.181727][T31722] and this task is already holding: [ 1014.208531][ T3891] kobject: 'loop0' (00000000505687ad): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1014.211744][T31722] ffff88809866aa80 (&(&sch->q.lock)->rlock){+.-.}, at: sfb_change+0x257/0xe90 [ 1014.211771][T31722] which would create a new lock dependency: [ 1014.211774][T31722] (&(&sch->q.lock)->rlock){+.-.} -> (&block->lock){+.+.} [ 1014.253359][T31993] kobject: 'nfs_client' (0000000055bed03d): kobject_uevent_env [ 1014.256259][T31722] [ 1014.256259][T31722] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1014.256262][T31722] (&(&sch->q.lock)->rlock){+.-.} [ 1014.256271][T31722] [ 1014.256271][T31722] ... which became SOFTIRQ-irq-safe at: [ 1014.256289][T31722] lock_acquire+0x190/0x410 [ 1014.256301][T31722] _raw_spin_lock+0x2f/0x40 [ 1014.256393][T31722] __dev_queue_xmit+0x14b0/0x35b0 [ 1014.256404][T31722] dev_queue_xmit+0x18/0x20 [ 1014.256418][T31722] neigh_resolve_output+0x5a5/0x970 [ 1014.256481][T31722] ip6_finish_output2+0x1034/0x2520 [ 1014.256500][T31722] __ip6_finish_output+0x444/0xa50 [ 1014.264543][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1014.269489][T31722] ip6_finish_output+0x38/0x1f0 [ 1014.269502][T31722] ip6_output+0x235/0x7c0 [ 1014.269527][T31722] ndisc_send_skb+0xf29/0x1450 [ 1014.269543][T31722] ndisc_send_rs+0x134/0x6d0 [ 1014.284038][T31993] kobject: 'nfs_client' (0000000055bed03d): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 1014.286506][T31722] addrconf_rs_timer+0x30f/0x680 [ 1014.286519][T31722] call_timer_fn+0x1ac/0x780 [ 1014.286530][T31722] run_timer_softirq+0x6c0/0x17f0 [ 1014.286615][T31722] __do_softirq+0x262/0x98c [ 1014.286632][T31722] irq_exit+0x19b/0x1e0 [ 1014.329663][T31993] IPVS: ftp: loaded support on port[0] = 21 [ 1014.333864][T31722] smp_apic_timer_interrupt+0x1a3/0x610 [ 1014.333877][T31722] apic_timer_interrupt+0xf/0x20 [ 1014.333892][T31722] debug_lockdep_rcu_enabled+0x5a/0xa0 [ 1014.333903][T31722] is_bpf_text_address+0x3e/0x170 [ 1014.333921][T31722] kernel_text_address+0x73/0xf0 [ 1014.343416][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1014.345925][T31722] __kernel_text_address+0xd/0x40 [ 1014.345938][T31722] unwind_get_return_address+0x61/0xa0 [ 1014.345949][T31722] arch_stack_walk+0x97/0xf0 [ 1014.345960][T31722] stack_trace_save+0xac/0xe0 [ 1014.345972][T31722] save_stack+0x23/0x90 [ 1014.345982][T31722] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1014.345991][T31722] kasan_kmalloc+0x9/0x10 [ 1014.346007][T31722] __kmalloc_node_track_caller+0x4e/0x70 [ 1014.476106][T31722] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1014.482517][T31722] __alloc_skb+0x10b/0x5e0 [ 1014.487021][T31722] alloc_skb_with_frags+0x93/0x590 [ 1014.492218][T31722] sock_alloc_send_pskb+0x7ad/0x920 [ 1014.497498][T31722] sock_alloc_send_skb+0x32/0x40 [ 1014.502515][T31722] __ip6_append_data.isra.0+0x1e55/0x3900 [ 1014.508312][T31722] ip6_make_skb+0x32f/0x561 [ 1014.512888][T31722] udpv6_sendmsg+0x218e/0x2990 [ 1014.517724][T31722] inet6_sendmsg+0x9e/0xe0 [ 1014.522305][T31722] sock_sendmsg+0xd7/0x130 [ 1014.526782][T31722] ___sys_sendmsg+0x3e2/0x920 [ 1014.531522][T31722] __sys_sendmmsg+0x1bf/0x4d0 [ 1014.536273][T31722] __x64_sys_sendmmsg+0x9d/0x100 [ 1014.541279][T31722] do_syscall_64+0xfa/0x760 [ 1014.545847][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.551886][T31722] [ 1014.551886][T31722] to a SOFTIRQ-irq-unsafe lock: [ 1014.558884][T31722] (&block->lock){+.+.} [ 1014.558890][T31722] [ 1014.558890][T31722] ... which became SOFTIRQ-irq-unsafe at: [ 1014.571014][T31722] ... [ 1014.571036][T31722] lock_acquire+0x190/0x410 [ 1014.578190][T31722] __mutex_lock+0x156/0x13c0 [ 1014.582932][T31722] mutex_lock_nested+0x16/0x20 [ 1014.587764][T31722] tcf_block_get_ext+0x3d6/0x16a0 [ 1014.592933][T31722] tcf_block_get+0xb9/0x100 [ 1014.597508][T31722] cbq_init+0x1f9/0xbb0 [ 1014.601732][T31722] qdisc_create+0x4ee/0x1210 [ 1014.606388][T31722] tc_modify_qdisc+0x524/0x1c50 [ 1014.611306][T31722] rtnetlink_rcv_msg+0x463/0xb00 [ 1014.616311][T31722] netlink_rcv_skb+0x177/0x450 [ 1014.621148][T31722] rtnetlink_rcv+0x1d/0x30 [ 1014.625647][T31722] netlink_unicast+0x531/0x710 [ 1014.630477][T31722] netlink_sendmsg+0x8a5/0xd60 [ 1014.634352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.635308][T31722] sock_sendmsg+0xd7/0x130 [ 1014.635319][T31722] ___sys_sendmsg+0x803/0x920 [ 1014.635330][T31722] __sys_sendmsg+0x105/0x1d0 [ 1014.635345][T31722] __x64_sys_sendmsg+0x78/0xb0 [ 1014.641087][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.645528][T31722] do_syscall_64+0xfa/0x760 [ 1014.645541][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.645544][T31722] [ 1014.645544][T31722] other info that might help us debug this: [ 1014.645544][T31722] [ 1014.645549][T31722] Possible interrupt unsafe locking scenario: [ 1014.645549][T31722] [ 1014.645557][T31722] CPU0 CPU1 [ 1014.699860][T31722] ---- ---- [ 1014.705211][T31722] lock(&block->lock); [ 1014.709350][T31722] local_irq_disable(); [ 1014.716089][T31722] lock(&(&sch->q.lock)->rlock); [ 1014.723612][T31722] lock(&block->lock); [ 1014.730271][T31722] [ 1014.733944][T31722] lock(&(&sch->q.lock)->rlock); [ 1014.739123][T31722] [ 1014.739123][T31722] *** DEADLOCK *** [ 1014.739123][T31722] [ 1014.747247][T31722] 2 locks held by syz-executor.5/31722: [ 1014.752840][T31722] #0: ffffffff8999f9e0 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 1014.761686][T31722] #1: ffff88809866aa80 (&(&sch->q.lock)->rlock){+.-.}, at: sfb_change+0x257/0xe90 [ 1014.770952][T31722] [ 1014.770952][T31722] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1014.781343][T31722] -> (&(&sch->q.lock)->rlock){+.-.} { [ 1014.786691][T31722] HARDIRQ-ON-W at: [ 1014.790662][T31722] lock_acquire+0x190/0x410 [ 1014.796803][T31722] _raw_spin_lock_bh+0x33/0x50 [ 1014.803197][T31722] dev_deactivate_many+0x60a/0xc20 [ 1014.809933][T31722] dev_deactivate+0x115/0x1e0 [ 1014.816239][T31722] linkwatch_do_dev+0x160/0x190 [ 1014.822720][T31722] __linkwatch_run_queue+0x203/0x690 [ 1014.829668][T31722] linkwatch_event+0x4e/0x70 [ 1014.835898][T31722] process_one_work+0x9af/0x1740 [ 1014.842476][T31722] worker_thread+0x98/0xe40 [ 1014.848700][T31722] kthread+0x361/0x430 [ 1014.854410][T31722] ret_from_fork+0x24/0x30 [ 1014.860448][T31722] IN-SOFTIRQ-W at: [ 1014.864422][T31722] lock_acquire+0x190/0x410 [ 1014.870562][T31722] _raw_spin_lock+0x2f/0x40 [ 1014.876712][T31722] __dev_queue_xmit+0x14b0/0x35b0 [ 1014.883366][T31722] dev_queue_xmit+0x18/0x20 [ 1014.889497][T31722] neigh_resolve_output+0x5a5/0x970 [ 1014.896339][T31722] ip6_finish_output2+0x1034/0x2520 [ 1014.903170][T31722] __ip6_finish_output+0x444/0xa50 [ 1014.909910][T31722] ip6_finish_output+0x38/0x1f0 [ 1014.916388][T31722] ip6_output+0x235/0x7c0 [ 1014.922360][T31722] ndisc_send_skb+0xf29/0x1450 [ 1014.928793][T31722] ndisc_send_rs+0x134/0x6d0 [ 1014.935027][T31722] addrconf_rs_timer+0x30f/0x680 [ 1014.941604][T31722] call_timer_fn+0x1ac/0x780 [ 1014.947823][T31722] run_timer_softirq+0x6c0/0x17f0 [ 1014.954494][T31722] __do_softirq+0x262/0x98c [ 1014.960657][T31722] irq_exit+0x19b/0x1e0 [ 1014.966463][T31722] smp_apic_timer_interrupt+0x1a3/0x610 [ 1014.973649][T31722] apic_timer_interrupt+0xf/0x20 [ 1014.980213][T31722] debug_lockdep_rcu_enabled+0x5a/0xa0 [ 1014.987298][T31722] is_bpf_text_address+0x3e/0x170 [ 1014.993966][T31722] kernel_text_address+0x73/0xf0 [ 1015.000538][T31722] __kernel_text_address+0xd/0x40 [ 1015.007259][T31722] unwind_get_return_address+0x61/0xa0 [ 1015.014369][T31722] arch_stack_walk+0x97/0xf0 [ 1015.021651][T31722] stack_trace_save+0xac/0xe0 [ 1015.027955][T31722] save_stack+0x23/0x90 [ 1015.033744][T31722] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1015.041006][T31722] kasan_kmalloc+0x9/0x10 [ 1015.046965][T31722] __kmalloc_node_track_caller+0x4e/0x70 [ 1015.054240][T31722] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1015.061253][T31722] __alloc_skb+0x10b/0x5e0 [ 1015.067329][T31722] alloc_skb_with_frags+0x93/0x590 [ 1015.074069][T31722] sock_alloc_send_pskb+0x7ad/0x920 [ 1015.080893][T31722] sock_alloc_send_skb+0x32/0x40 [ 1015.087463][T31722] __ip6_append_data.isra.0+0x1e55/0x3900 [ 1015.094816][T31722] ip6_make_skb+0x32f/0x561 [ 1015.101022][T31722] udpv6_sendmsg+0x218e/0x2990 [ 1015.107413][T31722] inet6_sendmsg+0x9e/0xe0 [ 1015.113452][T31722] sock_sendmsg+0xd7/0x130 [ 1015.119499][T31722] ___sys_sendmsg+0x3e2/0x920 [ 1015.125803][T31722] __sys_sendmmsg+0x1bf/0x4d0 [ 1015.132104][T31722] __x64_sys_sendmmsg+0x9d/0x100 [ 1015.138671][T31722] do_syscall_64+0xfa/0x760 [ 1015.144801][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.152426][T31722] INITIAL USE at: [ 1015.156302][T31722] lock_acquire+0x190/0x410 [ 1015.162359][T31722] _raw_spin_lock_bh+0x33/0x50 [ 1015.168676][T31722] dev_deactivate_many+0x60a/0xc20 [ 1015.175334][T31722] dev_deactivate+0x115/0x1e0 [ 1015.181577][T31722] linkwatch_do_dev+0x160/0x190 [ 1015.188055][T31722] __linkwatch_run_queue+0x203/0x690 [ 1015.194892][T31722] linkwatch_event+0x4e/0x70 [ 1015.201036][T31722] process_one_work+0x9af/0x1740 [ 1015.207618][T31722] worker_thread+0x98/0xe40 [ 1015.213731][T31722] kthread+0x361/0x430 [ 1015.219345][T31722] ret_from_fork+0x24/0x30 [ 1015.225295][T31722] } [ 1015.227792][T31722] ... key at: [] __key.79365+0x0/0x40 [ 1015.235238][T31722] ... acquired at: [ 1015.239026][T31722] lock_acquire+0x190/0x410 [ 1015.243680][T31722] __mutex_lock+0x156/0x13c0 [ 1015.248432][T31722] mutex_lock_nested+0x16/0x20 [ 1015.253349][T31722] tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 1015.259997][T31722] tcf_block_put_ext.part.0+0x2a/0x80 [ 1015.265519][T31722] tcf_block_put+0xbf/0x110 [ 1015.270178][T31722] sfb_destroy+0x37/0x80 [ 1015.274568][T31722] qdisc_destroy+0x11f/0x630 [ 1015.279305][T31722] qdisc_put+0x85/0xa0 [ 1015.283520][T31722] sfb_change+0x3d8/0xe90 [ 1015.287998][T31722] tc_modify_qdisc+0xfcf/0x1c50 [ 1015.292996][T31722] rtnetlink_rcv_msg+0x463/0xb00 [ 1015.298083][T31722] netlink_rcv_skb+0x177/0x450 [ 1015.303003][T31722] rtnetlink_rcv+0x1d/0x30 [ 1015.307575][T31722] netlink_unicast+0x531/0x710 [ 1015.312498][T31722] netlink_sendmsg+0x8a5/0xd60 [ 1015.317409][T31722] sock_sendmsg+0xd7/0x130 [ 1015.321974][T31722] ___sys_sendmsg+0x803/0x920 [ 1015.326810][T31722] __sys_sendmsg+0x105/0x1d0 [ 1015.331554][T31722] __x64_sys_sendmsg+0x78/0xb0 [ 1015.336479][T31722] do_syscall_64+0xfa/0x760 [ 1015.341150][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.347187][T31722] [ 1015.349490][T31722] [ 1015.349490][T31722] the dependencies between the lock to be acquired [ 1015.349493][T31722] and SOFTIRQ-irq-unsafe lock: [ 1015.362970][T31722] -> (&block->lock){+.+.} { [ 1015.367450][T31722] HARDIRQ-ON-W at: [ 1015.371414][T31722] lock_acquire+0x190/0x410 [ 1015.377544][T31722] __mutex_lock+0x156/0x13c0 [ 1015.383771][T31722] mutex_lock_nested+0x16/0x20 [ 1015.390163][T31722] tcf_block_get_ext+0x3d6/0x16a0 [ 1015.396818][T31722] tcf_block_get+0xb9/0x100 [ 1015.402947][T31722] cbq_init+0x1f9/0xbb0 [ 1015.408729][T31722] qdisc_create+0x4ee/0x1210 [ 1015.414947][T31722] tc_modify_qdisc+0x524/0x1c50 [ 1015.421422][T31722] rtnetlink_rcv_msg+0x463/0xb00 [ 1015.427998][T31722] netlink_rcv_skb+0x177/0x450 [ 1015.434388][T31722] rtnetlink_rcv+0x1d/0x30 [ 1015.440441][T31722] netlink_unicast+0x531/0x710 [ 1015.446836][T31722] netlink_sendmsg+0x8a5/0xd60 [ 1015.453229][T31722] sock_sendmsg+0xd7/0x130 [ 1015.459268][T31722] ___sys_sendmsg+0x803/0x920 [ 1015.465572][T31722] __sys_sendmsg+0x105/0x1d0 [ 1015.471794][T31722] __x64_sys_sendmsg+0x78/0xb0 [ 1015.478187][T31722] do_syscall_64+0xfa/0x760 [ 1015.484319][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.491836][T31722] SOFTIRQ-ON-W at: [ 1015.495822][T31722] lock_acquire+0x190/0x410 [ 1015.502052][T31722] __mutex_lock+0x156/0x13c0 [ 1015.508265][T31722] mutex_lock_nested+0x16/0x20 [ 1015.514805][T31722] tcf_block_get_ext+0x3d6/0x16a0 [ 1015.521495][T31722] tcf_block_get+0xb9/0x100 [ 1015.527625][T31722] cbq_init+0x1f9/0xbb0 [ 1015.533410][T31722] qdisc_create+0x4ee/0x1210 [ 1015.539636][T31722] tc_modify_qdisc+0x524/0x1c50 [ 1015.546124][T31722] rtnetlink_rcv_msg+0x463/0xb00 [ 1015.552686][T31722] netlink_rcv_skb+0x177/0x450 [ 1015.559077][T31722] rtnetlink_rcv+0x1d/0x30 [ 1015.565133][T31722] netlink_unicast+0x531/0x710 [ 1015.571524][T31722] netlink_sendmsg+0x8a5/0xd60 [ 1015.577916][T31722] sock_sendmsg+0xd7/0x130 [ 1015.583968][T31722] ___sys_sendmsg+0x803/0x920 [ 1015.590271][T31722] __sys_sendmsg+0x105/0x1d0 [ 1015.596521][T31722] __x64_sys_sendmsg+0x78/0xb0 [ 1015.602912][T31722] do_syscall_64+0xfa/0x760 [ 1015.609043][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.616554][T31722] INITIAL USE at: [ 1015.620471][T31722] lock_acquire+0x190/0x410 [ 1015.626512][T31722] __mutex_lock+0x156/0x13c0 [ 1015.632644][T31722] mutex_lock_nested+0x16/0x20 [ 1015.638967][T31722] tcf_block_get_ext+0x3d6/0x16a0 [ 1015.645541][T31722] tcf_block_get+0xb9/0x100 [ 1015.651589][T31722] cbq_init+0x1f9/0xbb0 [ 1015.657474][T31722] qdisc_create+0x4ee/0x1210 [ 1015.663644][T31722] tc_modify_qdisc+0x524/0x1c50 [ 1015.670047][T31722] rtnetlink_rcv_msg+0x463/0xb00 [ 1015.676589][T31722] netlink_rcv_skb+0x177/0x450 [ 1015.682896][T31722] rtnetlink_rcv+0x1d/0x30 [ 1015.688874][T31722] netlink_unicast+0x531/0x710 [ 1015.695191][T31722] netlink_sendmsg+0x8a5/0xd60 [ 1015.701494][T31722] sock_sendmsg+0xd7/0x130 [ 1015.707452][T31722] ___sys_sendmsg+0x803/0x920 [ 1015.713670][T31722] __sys_sendmsg+0x105/0x1d0 [ 1015.719810][T31722] __x64_sys_sendmsg+0x78/0xb0 [ 1015.726130][T31722] do_syscall_64+0xfa/0x760 [ 1015.732174][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.739610][T31722] } [ 1015.742105][T31722] ... key at: [] __key.76997+0x0/0x40 [ 1015.749547][T31722] ... acquired at: [ 1015.753337][T31722] lock_acquire+0x190/0x410 [ 1015.758008][T31722] __mutex_lock+0x156/0x13c0 [ 1015.762749][T31722] mutex_lock_nested+0x16/0x20 [ 1015.767665][T31722] tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 1015.774403][T31722] tcf_block_put_ext.part.0+0x2a/0x80 [ 1015.779923][T31722] tcf_block_put+0xbf/0x110 [ 1015.784587][T31722] sfb_destroy+0x37/0x80 [ 1015.788980][T31722] qdisc_destroy+0x11f/0x630 [ 1015.793717][T31722] qdisc_put+0x85/0xa0 [ 1015.797949][T31722] sfb_change+0x3d8/0xe90 [ 1015.802428][T31722] tc_modify_qdisc+0xfcf/0x1c50 [ 1015.807441][T31722] rtnetlink_rcv_msg+0x463/0xb00 [ 1015.812530][T31722] netlink_rcv_skb+0x177/0x450 [ 1015.817443][T31722] rtnetlink_rcv+0x1d/0x30 [ 1015.822016][T31722] netlink_unicast+0x531/0x710 [ 1015.826938][T31722] netlink_sendmsg+0x8a5/0xd60 [ 1015.831860][T31722] sock_sendmsg+0xd7/0x130 [ 1015.836439][T31722] ___sys_sendmsg+0x803/0x920 [ 1015.841286][T31722] __sys_sendmsg+0x105/0x1d0 [ 1015.846096][T31722] __x64_sys_sendmsg+0x78/0xb0 [ 1015.851502][T31722] do_syscall_64+0xfa/0x760 [ 1015.856174][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.862218][T31722] [ 1015.864542][T31722] [ 1015.864542][T31722] stack backtrace: [ 1015.870438][T31722] CPU: 1 PID: 31722 Comm: syz-executor.5 Tainted: G W 5.3.0+ #0 [ 1015.879354][T31722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.889394][T31722] Call Trace: [ 1015.892830][T31722] dump_stack+0x172/0x1f0 [ 1015.897217][T31722] check_irq_usage.cold+0x586/0x6fe [ 1015.902395][T31722] ? perf_trace_lock+0xeb/0x4c0 [ 1015.907226][T31722] ? check_usage_forwards+0x330/0x330 [ 1015.912580][T31722] ? is_bpf_text_address+0xac/0x170 [ 1015.917760][T31722] ? check_path+0x26/0x40 [ 1015.922071][T31722] ? __kasan_check_read+0x11/0x20 [ 1015.927082][T31722] ? check_noncircular+0x16d/0x3e0 [ 1015.932172][T31722] ? print_circular_bug.isra.0+0x230/0x230 [ 1015.937965][T31722] ? mark_held_locks+0xa4/0xf0 [ 1015.942707][T31722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.948928][T31722] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1015.954365][T31722] ? alloc_list_entry+0xc0/0xc0 [ 1015.959192][T31722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1015.965409][T31722] __lock_acquire+0x25d0/0x4e70 [ 1015.970246][T31722] ? __lock_acquire+0x25d0/0x4e70 [ 1015.975252][T31722] ? retint_kernel+0x2b/0x2b [ 1015.979819][T31722] ? mark_held_locks+0xf0/0xf0 [ 1015.984565][T31722] lock_acquire+0x190/0x410 [ 1015.989146][T31722] ? tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 1015.995811][T31722] __mutex_lock+0x156/0x13c0 [ 1016.000392][T31722] ? tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 1016.007058][T31722] ? debug_smp_processor_id+0x3c/0x214 [ 1016.012499][T31722] ? tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 1016.019152][T31722] ? save_stack+0x5c/0x90 [ 1016.023468][T31722] ? save_stack+0x23/0x90 [ 1016.027791][T31722] ? mutex_lock_io_nested+0x1260/0x1260 [ 1016.033313][T31722] ? fifo_set_limit+0x1a9/0x210 [ 1016.038153][T31722] ? fifo_create_dflt+0x90/0xf0 [ 1016.042992][T31722] ? sfb_change+0x18d/0xe90 [ 1016.047476][T31722] ? tc_modify_qdisc+0xfcf/0x1c50 [ 1016.052481][T31722] ? rtnetlink_rcv_msg+0x463/0xb00 [ 1016.057576][T31722] ? netlink_rcv_skb+0x177/0x450 [ 1016.062498][T31722] ? rtnetlink_rcv+0x1d/0x30 [ 1016.067077][T31722] ? netlink_unicast+0x531/0x710 [ 1016.071989][T31722] ? netlink_sendmsg+0x8a5/0xd60 [ 1016.076921][T31722] ? sock_sendmsg+0xd7/0x130 [ 1016.081500][T31722] ? ___sys_sendmsg+0x803/0x920 [ 1016.086349][T31722] ? __sys_sendmsg+0x105/0x1d0 [ 1016.091089][T31722] ? __x64_sys_sendmsg+0x78/0xb0 [ 1016.096013][T31722] ? do_syscall_64+0xfa/0x760 [ 1016.100672][T31722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.106719][T31722] ? __kasan_check_read+0x11/0x20 [ 1016.111741][T31722] ? mark_lock+0xc2/0x1220 [ 1016.116154][T31722] mutex_lock_nested+0x16/0x20 [ 1016.120895][T31722] ? mutex_lock_nested+0x16/0x20 [ 1016.125842][T31722] tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 1016.132333][T31722] ? __kasan_check_read+0x11/0x20 [ 1016.137337][T31722] ? mark_lock+0xc2/0x1220 [ 1016.141732][T31722] tcf_block_put_ext.part.0+0x2a/0x80 [ 1016.147092][T31722] tcf_block_put+0xbf/0x110 [ 1016.151572][T31722] ? tcf_block_put_ext+0x40/0x40 [ 1016.156490][T31722] ? sfb_destroy+0x80/0x80 [ 1016.160900][T31722] ? sfb_destroy+0x80/0x80 [ 1016.165312][T31722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.171533][T31722] ? prandom_u32+0x7d/0xb0 [ 1016.175944][T31722] ? sfb_zero_all_buckets+0x20/0x20 [ 1016.181138][T31722] sfb_destroy+0x37/0x80 [ 1016.185375][T31722] qdisc_destroy+0x11f/0x630 [ 1016.189945][T31722] qdisc_put+0x85/0xa0 [ 1016.194001][T31722] sfb_change+0x3d8/0xe90 [ 1016.198329][T31722] ? __sanitizer_cov_trace_cmp4+0x10/0x20 [ 1016.204029][T31722] ? sfb_graft+0x5f0/0x5f0 [ 1016.208447][T31722] ? nla_strcmp+0xe3/0x120 [ 1016.212844][T31722] ? sfb_graft+0x5f0/0x5f0 [ 1016.217266][T31722] tc_modify_qdisc+0xfcf/0x1c50 [ 1016.222202][T31722] ? qdisc_create+0x1210/0x1210 [ 1016.227252][T31722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.233476][T31722] ? qdisc_create+0x1210/0x1210 [ 1016.238308][T31722] rtnetlink_rcv_msg+0x463/0xb00 [ 1016.243226][T31722] ? rtnetlink_put_metrics+0x580/0x580 [ 1016.248680][T31722] ? lock_downgrade+0x920/0x920 [ 1016.253523][T31722] ? netlink_deliver_tap+0x22d/0xbf0 [ 1016.258786][T31722] ? find_held_lock+0x35/0x130 [ 1016.263528][T31722] netlink_rcv_skb+0x177/0x450 [ 1016.268271][T31722] ? rtnetlink_put_metrics+0x580/0x580 [ 1016.273712][T31722] ? netlink_ack+0xb30/0xb30 [ 1016.278282][T31722] ? __kasan_check_read+0x11/0x20 [ 1016.283284][T31722] ? netlink_deliver_tap+0x254/0xbf0 [ 1016.288553][T31722] rtnetlink_rcv+0x1d/0x30 [ 1016.292948][T31722] netlink_unicast+0x531/0x710 [ 1016.297698][T31722] ? netlink_attachskb+0x7c0/0x7c0 [ 1016.302807][T31722] ? _copy_from_iter_full+0x25d/0x8a0 [ 1016.308159][T31722] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1016.313864][T31722] ? __check_object_size+0x3d/0x437 [ 1016.319041][T31722] netlink_sendmsg+0x8a5/0xd60 [ 1016.323800][T31722] ? netlink_unicast+0x710/0x710 [ 1016.328729][T31722] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1016.334275][T31722] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1016.339727][T31722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.345951][T31722] ? security_socket_sendmsg+0x8d/0xc0 [ 1016.351392][T31722] ? netlink_unicast+0x710/0x710 [ 1016.356305][T31722] sock_sendmsg+0xd7/0x130 [ 1016.360702][T31722] ___sys_sendmsg+0x803/0x920 [ 1016.365380][T31722] ? copy_msghdr_from_user+0x440/0x440 [ 1016.370837][T31722] ? __kasan_check_read+0x11/0x20 [ 1016.375844][T31722] ? __fget+0x384/0x560 [ 1016.379992][T31722] ? ksys_dup3+0x3e0/0x3e0 [ 1016.384442][T31722] ? __fget_light+0x1a9/0x230 [ 1016.389127][T31722] ? __fdget+0x1b/0x20 [ 1016.393189][T31722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.399424][T31722] __sys_sendmsg+0x105/0x1d0 [ 1016.404010][T31722] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1016.409032][T31722] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1016.414470][T31722] ? do_syscall_64+0x26/0x760 [ 1016.419130][T31722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.425205][T31722] ? do_syscall_64+0x26/0x760 [ 1016.429884][T31722] __x64_sys_sendmsg+0x78/0xb0 [ 1016.434635][T31722] do_syscall_64+0xfa/0x760 [ 1016.439234][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.445137][T31722] RIP: 0033:0x459a09 [ 1016.449021][T31722] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1016.468612][T31722] RSP: 002b:00007ff2bcdeac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.477012][T31722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 1016.484970][T31722] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 1016.492934][T31722] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1016.500921][T31722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2bcdeb6d4 [ 1016.508883][T31722] R13: 00000000004c7933 R14: 00000000004dd328 R15: 00000000ffffffff [ 1016.516944][T31722] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:935 [ 1016.526249][T31722] in_atomic(): 1, irqs_disabled(): 0, pid: 31722, name: syz-executor.5 [ 1016.534755][T31722] INFO: lockdep is turned off. [ 1016.539509][T31722] Preemption disabled at: [ 1016.539525][T31722] [] sfb_change+0x257/0xe90 [ 1016.549949][T31722] CPU: 1 PID: 31722 Comm: syz-executor.5 Tainted: G W 5.3.0+ #0 [ 1016.558881][T31722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.568933][T31722] Call Trace: [ 1016.572209][T31722] dump_stack+0x172/0x1f0 [ 1016.576613][T31722] ? sfb_change+0x257/0xe90 [ 1016.581098][T31722] ___might_sleep.cold+0x1be/0x1f7 [ 1016.586213][T31722] __might_sleep+0x95/0x190 [ 1016.590705][T31722] ? rtnetlink_rcv_msg+0x463/0xb00 [ 1016.595799][T31722] ? netlink_rcv_skb+0x177/0x450 [ 1016.600720][T31722] __mutex_lock+0xc5/0x13c0 [ 1016.605207][T31722] ? __x64_sys_sendmsg+0x78/0xb0 [ 1016.610129][T31722] ? do_syscall_64+0xfa/0x760 [ 1016.614818][T31722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.620878][T31722] ? __kasan_check_read+0x11/0x20 [ 1016.625899][T31722] ? refcount_dec_and_mutex_lock+0x56/0x90 [ 1016.631688][T31722] ? mutex_lock_io_nested+0x1260/0x1260 [ 1016.637234][T31722] ? rwlock_bug.part.0+0x90/0x90 [ 1016.642157][T31722] ? debug_check_no_obj_freed+0xc0/0x43f [ 1016.647776][T31722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.654013][T31722] ? refcount_dec_not_one+0x13e/0x1f0 [ 1016.659366][T31722] ? refcount_dec_if_one+0xb0/0xb0 [ 1016.664461][T31722] mutex_lock_nested+0x16/0x20 [ 1016.669202][T31722] ? mutex_lock_nested+0x16/0x20 [ 1016.674122][T31722] refcount_dec_and_mutex_lock+0x56/0x90 [ 1016.679751][T31722] __tcf_block_put+0x32/0x540 [ 1016.684424][T31722] ? tcf_block_owner_del+0x1eb/0x270 [ 1016.689695][T31722] tcf_block_put_ext.part.0+0x69/0x80 [ 1016.695063][T31722] tcf_block_put+0xbf/0x110 [ 1016.699564][T31722] ? tcf_block_put_ext+0x40/0x40 [ 1016.704486][T31722] ? sfb_destroy+0x80/0x80 [ 1016.708888][T31722] ? sfb_destroy+0x80/0x80 [ 1016.713392][T31722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.714330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.719629][T31722] ? prandom_u32+0x7d/0xb0 [ 1016.725409][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1016.729852][T31722] ? sfb_zero_all_buckets+0x20/0x20 [ 1016.740824][T31722] sfb_destroy+0x37/0x80 [ 1016.745054][T31722] qdisc_destroy+0x11f/0x630 [ 1016.749633][T31722] qdisc_put+0x85/0xa0 [ 1016.753682][T31722] sfb_change+0x3d8/0xe90 [ 1016.758005][T31722] ? __sanitizer_cov_trace_cmp4+0x10/0x20 [ 1016.763774][T31722] ? sfb_graft+0x5f0/0x5f0 [ 1016.768179][T31722] ? nla_strcmp+0xe3/0x120 [ 1016.772643][T31722] ? sfb_graft+0x5f0/0x5f0 [ 1016.777057][T31722] tc_modify_qdisc+0xfcf/0x1c50 [ 1016.781961][T31722] ? qdisc_create+0x1210/0x1210 [ 1016.786809][T31722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.793093][T31722] ? qdisc_create+0x1210/0x1210 [ 1016.797933][T31722] rtnetlink_rcv_msg+0x463/0xb00 [ 1016.802872][T31722] ? rtnetlink_put_metrics+0x580/0x580 [ 1016.808334][T31722] ? lock_downgrade+0x920/0x920 [ 1016.813182][T31722] ? netlink_deliver_tap+0x22d/0xbf0 [ 1016.818504][T31722] ? find_held_lock+0x35/0x130 [ 1016.823253][T31722] netlink_rcv_skb+0x177/0x450 [ 1016.828027][T31722] ? rtnetlink_put_metrics+0x580/0x580 [ 1016.833484][T31722] ? netlink_ack+0xb30/0xb30 [ 1016.838058][T31722] ? __kasan_check_read+0x11/0x20 [ 1016.843067][T31722] ? netlink_deliver_tap+0x254/0xbf0 [ 1016.848346][T31722] rtnetlink_rcv+0x1d/0x30 [ 1016.852751][T31722] netlink_unicast+0x531/0x710 [ 1016.857495][T31722] ? netlink_attachskb+0x7c0/0x7c0 [ 1016.862600][T31722] ? _copy_from_iter_full+0x25d/0x8a0 [ 1016.867970][T31722] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1016.873742][T31722] ? __check_object_size+0x3d/0x437 [ 1016.878940][T31722] netlink_sendmsg+0x8a5/0xd60 [ 1016.883689][T31722] ? netlink_unicast+0x710/0x710 [ 1016.888622][T31722] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1016.894173][T31722] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1016.899635][T31722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1016.905870][T31722] ? security_socket_sendmsg+0x8d/0xc0 [ 1016.911316][T31722] ? netlink_unicast+0x710/0x710 [ 1016.916293][T31722] sock_sendmsg+0xd7/0x130 [ 1016.920744][T31722] ___sys_sendmsg+0x803/0x920 [ 1016.925404][T31722] ? copy_msghdr_from_user+0x440/0x440 [ 1016.930862][T31722] ? __kasan_check_read+0x11/0x20 [ 1016.935875][T31722] ? __fget+0x384/0x560 [ 1016.940011][T31722] ? ksys_dup3+0x3e0/0x3e0 [ 1016.944420][T31722] ? __fget_light+0x1a9/0x230 [ 1016.949076][T31722] ? __fdget+0x1b/0x20 [ 1016.953139][T31722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1016.959371][T31722] __sys_sendmsg+0x105/0x1d0 [ 1016.963945][T31722] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1016.968969][T31722] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1016.974427][T31722] ? do_syscall_64+0x26/0x760 [ 1016.979105][T31722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.985161][T31722] ? do_syscall_64+0x26/0x760 [ 1016.989822][T31722] __x64_sys_sendmsg+0x78/0xb0 [ 1016.994575][T31722] do_syscall_64+0xfa/0x760 [ 1016.999078][T31722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1017.004948][T31722] RIP: 0033:0x459a09 [ 1017.008826][T31722] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1017.028414][T31722] RSP: 002b:00007ff2bcdeac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.036828][T31722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 1017.044802][T31722] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 1017.052768][T31722] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1017.060734][T31722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2bcdeb6d4 [ 1017.068699][T31722] R13: 00000000004c7933 R14: 00000000004dd328 R15: 00000000ffffffff 14:41:58 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x208e0, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x440900) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="1a85536fb5308847ca1c9144fab154e2d97f7d3d5dd7c90ef5ba27f12332808ac709a2f67aa4565978bfb760a6a5ae807f11d33ec57110deeb7e5e508d654e5c616f60c3d5a1352f9a6cf1628e2fb442ce372333e70c5ad72b3bbc4d33945d5a1def1db77ab6eb5163dffc2bf74412f56ba4dcd648ccbf9f74a3a9d070e1bc3117343517506913dc2ec227443bb29ece7b3e76e0366b1d2ed997e1704ad3819032bcd8a0beaedc530da633fce97e05882b9a2cebe223989431c18d2fded97b40fae88e0f2ffa53a63078d71a18a4b0e8076b8f9800b754", 0xd7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYPTR64, @ANYRESHEX], 0x31) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 14:41:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe02000000010800080011000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x5) dup3(r4, r5, 0x0) r7 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r7, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r7) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r8, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r8, 0x55b, 0x5}, &(0x7f0000000080)=0xc) 14:41:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff0000ae01, &(0x7f0000000000)) 14:42:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:42:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x901400, 0x0) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000045}, 0x20000800) 14:42:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff0000ae41, &(0x7f0000000000)) 14:42:01 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0xffffffff00000000}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1017.076972][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1017.082755][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1017.101131][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:42:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff0000ae80, &(0x7f0000000000)) [ 1017.136275][ T3891] kobject: 'loop1' (00000000118f9a0f): kobject_uevent_env [ 1017.143664][ T3891] kobject: 'loop1' (00000000118f9a0f): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:42:01 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='\x01\x00evose\xbe\x89encer2\x00', 0x2e8082, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x800, 0x0, 0x0}) [ 1017.189157][ T3891] kobject: 'loop5' (0000000006aea56f): kobject_uevent_env [ 1017.210070][T32121] kobject: 'veth178' (0000000044ecd06e): kobject_add_internal: parent: 'net', set: 'devices' [ 1017.230044][ T3891] kobject: 'loop5' (0000000006aea56f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1017.254133][T32121] kobject: 'veth178' (0000000044ecd06e): kobject_uevent_env [ 1017.270999][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env 14:42:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x121002) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) 14:42:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x800, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80c40, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r4, 0x0, 0x0, "b1"}, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0x80, @remote, 0x1000}}, [0x8, 0xae, 0x4, 0x3, 0x0, 0x2, 0x10000, 0x7, 0x7fffffff, 0xfffffffffffffff8, 0x7ff, 0xffff, 0x7394, 0x1, 0x6]}, &(0x7f0000000300)=0x100) r5 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) recvfrom(r5, &(0x7f0000000040)=""/89, 0x59, 0x110, &(0x7f0000000140)=@caif, 0x80) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 1017.281029][T32121] kobject: 'veth178' (0000000044ecd06e): fill_kobj_path: path = '/devices/virtual/net/veth178' [ 1017.302080][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1017.325918][T32121] kobject: 'queues' (000000004acb5254): kobject_add_internal: parent: 'veth178', set: '' 14:42:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff40045431, &(0x7f0000000000)) [ 1017.350773][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1017.367656][T32121] kobject: 'queues' (000000004acb5254): kobject_uevent_env [ 1017.380807][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1017.403663][T32121] kobject: 'queues' (000000004acb5254): kobject_uevent_env: filter function caused the event to drop! [ 1017.421576][ T3891] kobject: 'loop4' (000000008513432a): kobject_uevent_env [ 1017.429279][T32121] kobject: 'rx-0' (000000008cd55b11): kobject_add_internal: parent: 'queues', set: 'queues' [ 1017.443404][ T3891] kobject: 'loop4' (000000008513432a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1017.459235][T32121] kobject: 'rx-0' (000000008cd55b11): kobject_uevent_env [ 1017.470165][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1017.481434][T32121] kobject: 'rx-0' (000000008cd55b11): fill_kobj_path: path = '/devices/virtual/net/veth178/queues/rx-0' [ 1017.493534][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1017.510013][T32121] kobject: 'tx-0' (000000006cd86481): kobject_add_internal: parent: 'queues', set: 'queues' [ 1017.538456][ T3891] kobject: 'loop4' (000000008513432a): kobject_uevent_env [ 1017.548640][T32121] kobject: 'tx-0' (000000006cd86481): kobject_uevent_env [ 1017.557342][ T3891] kobject: 'loop4' (000000008513432a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1017.582694][T32121] kobject: 'tx-0' (000000006cd86481): fill_kobj_path: path = '/devices/virtual/net/veth178/queues/tx-0' [ 1017.604872][T32121] kobject: 'batman_adv' (0000000077da8050): kobject_add_internal: parent: 'veth178', set: '' [ 1017.617699][T32121] kobject: 'veth179' (0000000000664072): kobject_add_internal: parent: 'net', set: 'devices' [ 1017.629278][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1017.637618][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1017.655503][T32121] kobject: 'veth179' (0000000000664072): kobject_uevent_env [ 1017.665445][T32121] kobject: 'veth179' (0000000000664072): fill_kobj_path: path = '/devices/virtual/net/veth179' [ 1017.676232][T32121] kobject: 'queues' (0000000006447fe3): kobject_add_internal: parent: 'veth179', set: '' [ 1017.692177][T32121] kobject: 'queues' (0000000006447fe3): kobject_uevent_env [ 1017.704553][T32121] kobject: 'queues' (0000000006447fe3): kobject_uevent_env: filter function caused the event to drop! [ 1017.719187][T32121] kobject: 'rx-0' (000000007b57a230): kobject_add_internal: parent: 'queues', set: 'queues' [ 1017.735266][T32121] kobject: 'rx-0' (000000007b57a230): kobject_uevent_env [ 1017.742663][T32121] kobject: 'rx-0' (000000007b57a230): fill_kobj_path: path = '/devices/virtual/net/veth179/queues/rx-0' [ 1017.761965][T32121] kobject: 'tx-0' (00000000b993babc): kobject_add_internal: parent: 'queues', set: 'queues' [ 1017.776192][T32121] kobject: 'tx-0' (00000000b993babc): kobject_uevent_env [ 1017.784154][T32121] kobject: 'tx-0' (00000000b993babc): fill_kobj_path: path = '/devices/virtual/net/veth179/queues/tx-0' [ 1017.796389][T32121] kobject: 'batman_adv' (00000000aa3296cf): kobject_add_internal: parent: 'veth179', set: '' [ 1017.821524][T32201] kobject: 'veth180' (0000000093ae7b70): kobject_add_internal: parent: 'net', set: 'devices' [ 1017.843756][ T3891] kobject: 'loop1' (00000000118f9a0f): kobject_uevent_env [ 1017.855055][T32201] kobject: 'veth180' (0000000093ae7b70): kobject_uevent_env [ 1017.862482][ T3891] kobject: 'loop1' (00000000118f9a0f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1017.872816][T32201] kobject: 'veth180' (0000000093ae7b70): fill_kobj_path: path = '/devices/virtual/net/veth180' [ 1017.884072][T32201] kobject: 'queues' (0000000072eb3e16): kobject_add_internal: parent: 'veth180', set: '' [ 1017.904897][T32201] kobject: 'queues' (0000000072eb3e16): kobject_uevent_env [ 1017.912304][T32201] kobject: 'queues' (0000000072eb3e16): kobject_uevent_env: filter function caused the event to drop! [ 1017.924238][T32201] kobject: 'rx-0' (000000009214f1cf): kobject_add_internal: parent: 'queues', set: 'queues' [ 1017.934693][T32201] kobject: 'rx-0' (000000009214f1cf): kobject_uevent_env [ 1017.941834][T32201] kobject: 'rx-0' (000000009214f1cf): fill_kobj_path: path = '/devices/virtual/net/veth180/queues/rx-0' [ 1017.953337][T32201] kobject: 'tx-0' (000000006a04f6fa): kobject_add_internal: parent: 'queues', set: 'queues' [ 1017.963678][T32201] kobject: 'tx-0' (000000006a04f6fa): kobject_uevent_env [ 1017.970863][T32201] kobject: 'tx-0' (000000006a04f6fa): fill_kobj_path: path = '/devices/virtual/net/veth180/queues/tx-0' [ 1017.983084][T32201] kobject: 'batman_adv' (000000002f2267a9): kobject_add_internal: parent: 'veth180', set: '' [ 1018.000512][T32201] kobject: 'veth181' (00000000620028a4): kobject_add_internal: parent: 'net', set: 'devices' [ 1018.011398][T32201] kobject: 'veth181' (00000000620028a4): kobject_uevent_env [ 1018.018850][T32201] kobject: 'veth181' (00000000620028a4): fill_kobj_path: path = '/devices/virtual/net/veth181' [ 1018.029673][T32201] kobject: 'queues' (000000003efba438): kobject_add_internal: parent: 'veth181', set: '' [ 1018.040170][T32201] kobject: 'queues' (000000003efba438): kobject_uevent_env [ 1018.047384][T32201] kobject: 'queues' (000000003efba438): kobject_uevent_env: filter function caused the event to drop! [ 1018.058363][T32201] kobject: 'rx-0' (00000000afb1e7e9): kobject_add_internal: parent: 'queues', set: 'queues' [ 1018.068579][T32201] kobject: 'rx-0' (00000000afb1e7e9): kobject_uevent_env [ 1018.075710][T32201] kobject: 'rx-0' (00000000afb1e7e9): fill_kobj_path: path = '/devices/virtual/net/veth181/queues/rx-0' [ 1018.086978][T32201] kobject: 'tx-0' (00000000b3b481a7): kobject_add_internal: parent: 'queues', set: 'queues' [ 1018.097286][T32201] kobject: 'tx-0' (00000000b3b481a7): kobject_uevent_env [ 1018.104394][T32201] kobject: 'tx-0' (00000000b3b481a7): fill_kobj_path: path = '/devices/virtual/net/veth181/queues/tx-0' [ 1018.116445][T32201] kobject: 'batman_adv' (00000000bed53d21): kobject_add_internal: parent: 'veth181', set: '' [ 1018.152633][ T3891] kobject: 'loop5' (0000000006aea56f): kobject_uevent_env [ 1018.160768][ T3891] kobject: 'loop5' (0000000006aea56f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1018.375247][T31993] kobject: 'nfs_client' (0000000055bed03d): kobject_uevent_env [ 1018.382889][T31993] kobject: 'nfs_client' (0000000055bed03d): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 1018.393110][T31993] kobject: 'nfs_client' (0000000055bed03d): kobject_cleanup, parent 000000001ccf1835 [ 1018.402592][T31993] kobject: 'nfs_client' (0000000055bed03d): calling ktype release [ 1018.410451][T31993] kobject: 'nfs_client': free name 14:42:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x2) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0x6697, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x1, 0x1, 0x4, &(0x7f0000ffd000/0x2000)=nil, 0x3}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x3, 0xaa9, 0x200, 0x0, 0x40000, 0x0, 0x6}, 0x20) sendto$inet6(r2, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) pipe(&(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000480), 0x100000000000022c, 0x0) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f0000000280)="fa9b02d20946fd58c5c378bac0141b2603c5d8ba2f649e5a0fa4f128321da99719a0e9e1ff9299bfcaad2778d0", 0x2d}, {&(0x7f0000000900)="d84d64b1bb42636c560c8f5e5c0450434e07faff802f5b7a03e88cf94cc1caf4eb0f73d7d6eafb6ca5ff6935bae92fa087922fd3d7587e7f1f88d3b3f43b5b64c0bfe23fa0033fc8cb16aa77bcc091c0e4cdfa3fe684b9a8d5a5549171297fae6a989205fe7971920434e7a315c1a4cc34e72e6c5a147b645fb5fb6007b81bf70434170d4383e6d8a90dbce9877bda2b0122cfdef2800668e8315dff441128f63df25a212ef4ab7bf1418bc3f0c8acb21b880b1391e402cb5778cdb0d5c1dba1f141726e8ff8bfa258883e81d2f8742c3a00d2dfcd5a06ad422fa9789513a1e5446a9471dddce827a9f9e9903864fc074a311566c3688c312eeb33e6560d104d4b946f75ab40350be78faa8785184e6546e8dadffdb16316e351f4c208a7939e600fbf9723a8322c01b61d0a54c54cc432b3f027dfd19c5e93200148c8d64d6225b57310f1bf0c485767947ce5381949efcf1bed755567d7d51bfef89b7d4d407cc708999fbff9d34e796efbc69045ed459e9fb9e7efb454a61e85bb51679d2a3b1b01c8d3f759633aa4a180afa9aa40eaa7e230460220d7238d6b1746d23870cbf571088efa9376f26e124eb268b31e2debfe4111b33fde15d26bde871368ed4791ecbb9cf0327ab2a6bf7b0483e9afacebcdccb2cd668e2a158a87f245c5a58d738d087761a868fe2e58e5981e275416e5348f3d78cc8ebb467c90d293155883b2f87afd6a22a5f617680fc082c278bf9ca8d1f1c024a04814b49ede626b57aacef1f081e38ec77770d219f9e8d48e3a63e1c9de2100f8ef7971de1f6feb50890b6d1f8b7d2bab0285483465716e66030f9673a28b7ed7f57edf6494b0bff2975381d72fd9c2bde4647a5afdecc19b4876c789c9fb39fcbbda72bbbd908530fdb97676a3e25b5a540f543fa4800825bc6aefd820517678eb0d5896bc0b0e6affcde6823386cbebeecd0527d7d8921d3dc634578c47a3691b4600847832161eb6bff1fcbb82454413fd7581a02cdf9dd475fd46cf18549130ae07c733207bede3c4f8114f99a5109ce7ff1202cd71c6c85d5180897dca919a5b2e9cf7c014644770076283e9f4bdcf460a6d587e4631e18ec6895f0036791dc4c73ed09c24b4ba310b37cab0627d2986958797528ea6587caebe4a8790d1f620e9672d9bcd19f8ced5bfa5c648a9f1d909a9431b7736819f72318717ae5997366c9f4176beb9fb728441b4d8966667a005647ce31506da72337e8992efa50fd9278202908b22aa080eea31fb273bb3d9e5c6800a55b8e3ede055474041ee7a56571c16f2e32dda307ae0982d99cde080893ecfd555fd3a1bba5cd89b5ea107ecc6a1a524180fe44560d416851af1e38a42c715bd205cbd5679d9eb70d7eb6398b8c6e83d561ab8d53ed03e297c8e36d22fb770dd606694c5f53f146f70c99d08fe46e53a3d3cbc3a66df7a1df4bcffada9e105aadf425045b21815c3c7098f3b259281c06b8dc2cd4a637a917ae920dd3fccc2ba4bd0a087febd05303f8d93b30d88cd5cf81c19e5852520f3f08eff4e06818554efe4fe2d5d1337725404f06e69db3d5974fae97a1a6f9baabda571ff452c2204ee7e56a3447502d979de7b1c3fe3c7e83abfd4cc62b561175a6716e1f3216ad71fc5858cd1ed0c31f316b424b805366c5adec3510d6cd373eb4374c38bbd8e8558e63d70a31d6b17048f4bc0e41eee8ec7ed51bbf3e9359a5942068147c38d67bf6185abce29cf5082d6cc554500589aed1d1633cc1dbc47ca2cfbb7d85d47f0621385a7ae5e21b4a2689c8e68ebc27e4860337b4829c6e05b5f97a32fd61e77577a03f192f3271e861002003222131cc9960142426e9a5b08da0605bcc5be615e4003bf141a7bce23ab9727a473ed3ea72e9598994d57ab40dc7493c510553e22c17a6b650fa3ea848bea2debfe429ab93754058fe1fc2c2f244afbdcc25a838a5589b004796fd223da69393e16c946b9a9b061db0e266556a26511a3d636568e923c838aad3df1e85088ff4820bc38f017935a4c77b355dbe5efbecefb20ada3dc7e3582948482cd837ae062cc334c3e5458c1b258f5027d6c2f512461010394a25f85397c7c2540681b2e034a5419896a6994960024f68b35b0b21cc60bad52d10bf789145dfd36448253d4ef4f2a1e3d43ff88468cbb8282e826cc37c0187c827ceed820c42481624b5d44d5fb37873cc063c5a879420f699b45c847df347986ec7b1b2ede71476b73bfcca503147c161641905243f75d597dc7de14514ea43cf48ad8adbdc774dee473daaa4a927adffbe04be02c98a78438940ef1a922dc097d071da5a5c335bf606f8d5d83c6104c23d4137e0beabb44b8a90601d015175930ae1fe13f65f2ea55739970322e72a878c2a8aba12e80e89f8f81cd75ac1cef45f16d83e90859cc5459990b5495a88c5698a41e3e41273e82bf0c85d122cb94f79c37b4316ee0f9886e35eb4a3cc3696ec13a9b93d68d56490e4f6e2173de0ff73b81a231180d405a68b75332668c152218635c874941aa070d106374a7105bade71df45e914ace42cd45bac58805ce3d6fd70eba1d6688e39321d13cba980ce88f8c94f9fb19dcbfe14521e1cc518fb9b998d875a89e42234b1c1395652801bec4a0b207e560f9e8e5b2a1939aaed8b83cb39e8d19270b811349f822a20d7ed08dd372ffb2a8a9856ab6220d72b8dd4cbf75b801ad9e3cc41d354bbee106140c38ee8f4c2e96536c5c1cf33f7843acf2cafc768c8041677e1b83efaf55efec14ded14c9625b96a168b8dc4672ee371f5d5d26ab0182ca4c7301bf48edeeb323d5a1214f0621b9078c1d6d6cb8bcb7bf6d3ab5d1a8811460a2b446b42d9cf00ecf96f788c7c271556922e0ba6128b726a43b234f80dfefdfe2863d801d5420a4ba4ade7de54ccbb8a6ada43b0b3fc691d603f13f6dcfd7920672f46be5a2b655477eb5433fa8581b6e7dd75eac52502a17f8fb18b8531c98edca750ce339e5c8643cef5d5aced2096f83b6b3eb4a26b01460b2d6d8a684820b41c73b9101c2ac6905d78c20e7b7269c5e84530a9dfcee195364db50f1c43ef4eb1955686f8a55868ed532a481811fb90c238603af81c559d8a3287aa88131a4a716e41e4b53837ca77ba3e005e25db58c6ce812a34ebcd5fbffde43daaf1fe257c36e644386079137a772de6d88d14548d9eba9f2b0f0651d81dffaca7d4397ec2a7ebe2e5fc2a15b4eac20d7267baa49c7799b48248c295a510a60d65c7a4d860a4b7c301d063d8c79b3d51d952569834b86da96299a3efc2ec2806934f7b97efac657b47f30654157081d7d586e85553798281c49a268f127f2ac151cf900555ffe9c9d51c3d2222c1ca99c68c32462fd9b65b49c075e99f553e1656f42ea65baf134f0f50531e3a69beb759ab16656fe2fbbfde5a9a9e9f179529975f068a972400c9b6c75d6e2a3049ceebdc24346f9362a816b25ff14062fcc88b3b5d17a4589e883bb6e0f64f9218e7a370f8cdec0508efbc6d75ea6804d3650ce0392550e9718fa80478a1d2beb08ce7305cb44789a89f21851feecb7c25cb229caa49a04c80c0b33847f5e0254c95ff13305671021f2f8fd7c6278c406b0475f0823d934bcc89a1962694e13c365f787b52319dc8d39b34f6a5364277b469f5a083718cc29758dc9ff3b604b34e44960b10516dbb3730f73ec7b2b12ff9931de0b22cc095525281b19396079ffb52d6a761bf11fc11743b3f5fef571acec896c4b5951e30aff965946522d17ea90bd1e15f09ea0b620fb92cb192313045bc31791245ac2e3d272432d285f2d3121bab4d47e30082ea25cb5846ed1fb6b67a987ab9cc853dc600059cf52de6160ee9e921349883e20c40f43dfdec23bc1c8030c4251540a515251a83fed2632a134fd875a6216a8193505d899aafee87cdcdd0d77e0d4a9e10a1457aed0c42f6c43ddd1e2c6c81008678dc09d6d22768cfd4a81a5ea1c5b2e6d567c6a13de2ca41ca295049490c157500746ef5e692c57ae05176a0cf68840c0bfbad0920ae705d8cf709f511104762c368e2f0ccd3045ff618d089d3f8599e1c2d22547b9d743c6bfad7844ea35a4ad59a444639a6adac60197b80c263c8bf13459f18278b946ba81bec5de94e8cda11920984280ef9853c5a4d784fb55087aa03bf80c603b3081b4219ce66be2eaf01c14bc1e4041d9463eb3b539de2e94cc042097b68afea4f7c07cac0e8a63c9810c17a869582252d65de17c88f4796321c91475b3856e174762c462995f83b65f47fb5219eeaf854aaafde003e466a4a4a17bbf7c5df3756b9aaf50beda1ac462653a46b2d6f3fbe4f793a36d1c51f89c22fbdff25643f4f7345a1e74aa7cda2a242dcb10942b5304eaa62769a337da41d05ed0fc7a443526211ad2be85911232e901b9cd59cd33c8029a153965d900716fcafd8d1f2209a5f094927fad518882df4f34ae0bc0878b15c7c15179a70e4eb6bc1d82875dc0d24dc6cad1d8a3664f40aebd65a9e40fe61499e5ee9ace5e5b6b186bf89db5d3d1b486b9ee60aed817fe8ca7232f5fc4625fbf4468ffb118131b354e1c984006f6a0b4cfa649af45e8700a2f9d2827eb2e540bc60df195535fea4269d57142c30ff463e20b39baaa6eb4842d98d699b9ea6ef3e8bd5c336628927513a1471fc14fff8f7c200c0319016a25ea9177b95b2ee3363c1912b67ac4cc349d152447e28a871add2bab4d2607dff2caa22e281c080376bb727f0bcf2bd2641af1434550508c45084e01bc6ce02a7a09cfe4f7210233990bb758669b268a87e28decb6111199e560ed497e408e41fd281ff39c1f5437a68ebecadbbedeff495302cabfed2a202a5c6212c1070595a60a76beeefbd5e9b7d3b15a196425fa1140b84cbfbcdf56b3eaf6e300fa84d99a152938d3b5356ecd13e973fa90aaea13d460fa7326840fd7f43eae946e61b76f98e8776306189e68c0f5e2d5907a32718c98467ee26ced29da6ae6bf466c808294fab5199698a4cbf8dd6032354a9abc908dd4071b7e0c0bea54a04733823d4e9363f310560ff3a4b94a5e90cf1d21f1dc75801cb11b9b8f44c67cdc4786ec64ade547771e406bf3a3d1a50e6eef2c45b65000456f7ecc66100b06355b0727247df990d8800b5e7c48fca4b6610e6be9e657b35a52bbb19457e5c22cd90060d14ab971d8ab18b53d527d3f420a737a21ff7e63f89353ae461b392ba505e30cca59f72e2db4d7c04783ff99fd12d76466a284cae4051cf0cc7659426c5c4d37a3de9a858077cf697bed50dfe3825a4fc727244b4279a5d9f14cc14b0c8d6fea1ec1e031720e3c5bd1297dd5ace3152dc4e21036484553ef593a99995914d118ffd7367c4664f6f6c3087539451aa174ec8b22a098fb5b1f5eaa698c485a23d731dfcfeda8797b2d5064da05c85a4eb78b6b2ba40a1706b4c35b02e994794f17419f04ad6b4b1527619d465bd03c31c9463a1f381a8702a44e0edd9c4f6d236359ee8ce9ca2fde72b5236c4e6c6dfd7c4ad5c50962187f9aca9c44ffcdb7cb34467b6e111e7935f1edbd6a9c4cf195350df66f01646322239258fdba6559da7644c41d96700096ca69c89a34ead0d84727cbad4c8e7e411cd89595bc06dd4d417e36877bebf648b5fc83decfdd92e6d51a21cb5096a201b4ca6936cf1071c45777e71ac06a96a14c58a007acf9db7ca94d218c902e9c2e66b8334c4edcb278cb283", 0xfe0}, {&(0x7f0000000640)="5ce5a1833482e641ce33447bba2da33043c7943219f037e743a11ae4063d29eba22a56f75b93dd88a1ebbc0a3d9d5838fd8283f01dc73f5923cccc45e40ff38cea33bcead2b7f1fc19a07e003e7c29405383bda5d09d3b371eeab4c0faed8d56f620c24441", 0x65}, {&(0x7f00000006c0)="edae9cd10bc0b7ac22a14c546b43a46e3c3de09d2f33de61fa4cf25d7640e0c294476202ca4c46305fecd0cea64cecf9ff1f80cc5216c75dc99cccd55c54a4c1d15392737c5f9d1dea7a7dd0dd255fba8ee03b81fd3a3a40bbf574f0", 0x5c}], 0x4, 0x12) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x200000, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0xffffff53) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000007, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000140)=0xeb2, 0x4) syz_open_dev$vivid(0x0, 0x2, 0x2) 14:42:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff400454ca, &(0x7f0000000000)) 14:42:02 executing program 2: r0 = gettid() tkill(r0, 0x1000000000015) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x9, 0x94, 0x0, 0x8, 0x0, 0xff28, 0x2010, 0x4, 0x7, 0xfffffffffffffffe, 0x6, 0x1, 0x2, 0x9, 0x3, 0x2, 0x9, 0x2a, 0x9, 0x9, 0x9, 0x6, 0x5e, 0xdfb2, 0x0, 0x3, 0x5, 0x80000001, 0x7, 0x1, 0x8, 0x200, 0x1f, 0x7ff, 0x7, 0x800, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x11}, 0xbe31172b6bed5941, 0x2, 0x0, 0x1b, 0x2, 0x8, 0x4b51c749}, r0, 0xb, r1, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x800, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:42:02 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:42:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:42:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x5, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:42:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff4004743b, &(0x7f0000000000)) [ 1018.543571][T32543] kobject: 'veth182' (00000000d08db49b): kobject_add_internal: parent: 'net', set: 'devices' [ 1018.558538][ T3891] kobject: 'loop0' (00000000505687ad): kobject_uevent_env [ 1018.563468][T32543] kobject: 'veth182' (00000000d08db49b): kobject_uevent_env [ 1018.572820][ T3891] kobject: 'loop0' (00000000505687ad): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1018.579751][T32543] kobject: 'veth182' (00000000d08db49b): fill_kobj_path: path = '/devices/virtual/net/veth182' [ 1018.616392][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1018.619536][T32543] kobject: 'queues' (0000000055fe7593): kobject_add_internal: parent: 'veth182', set: '' [ 1018.623701][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' 14:42:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff40049409, &(0x7f0000000000)) 14:42:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() tkill(r1, 0x1000000000015) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x1000, 0x8, 0x5, 0x4, 0x0, 0x35ad, 0x60290, 0x8, 0x6, 0x3, 0x1, 0x10000, 0x3, 0x201, 0xc46, 0x20, 0x8, 0x1, 0x100, 0x7179, 0x6c68, 0x1, 0x1000, 0xad6, 0x0, 0x59, 0x3, 0x100, 0x6, 0x6, 0xeafe, 0x7f, 0x666, 0x80000000, 0x10001, 0x3, 0x0, 0x2, 0x4, @perf_config_ext={0xd5, 0xb6}, 0x20, 0x1, 0x9, 0x5, 0x7, 0x7ff}, r1, 0x9, r2, 0x1) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x60048d0}, 0xc) [ 1018.672507][T32543] kobject: 'queues' (0000000055fe7593): kobject_uevent_env [ 1018.682805][T32543] kobject: 'queues' (0000000055fe7593): kobject_uevent_env: filter function caused the event to drop! [ 1018.701614][T32543] kobject: 'rx-0' (000000001cf175c5): kobject_add_internal: parent: 'queues', set: 'queues' [ 1018.725438][ T3891] kobject: 'loop4' (000000008513432a): kobject_uevent_env [ 1018.732007][T32543] kobject: 'rx-0' (000000001cf175c5): kobject_uevent_env [ 1018.732602][ T3891] kobject: 'loop4' (000000008513432a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1018.747105][T32543] kobject: 'rx-0' (000000001cf175c5): fill_kobj_path: path = '/devices/virtual/net/veth182/queues/rx-0' 14:42:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff40087703, &(0x7f0000000000)) 14:42:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff4008ae89, &(0x7f0000000000)) [ 1018.765966][T32543] kobject: 'tx-0' (00000000b2a2c873): kobject_add_internal: parent: 'queues', set: 'queues' [ 1018.784555][T32543] kobject: 'tx-0' (00000000b2a2c873): kobject_uevent_env [ 1018.791911][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1018.799199][ C0] net_ratelimit: 8 callbacks suppressed [ 1018.799207][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1018.799254][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1018.816858][T32543] kobject: 'tx-0' (00000000b2a2c873): fill_kobj_path: path = '/devices/virtual/net/veth182/queues/tx-0' [ 1018.817502][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1018.854637][T32543] kobject: 'batman_adv' (000000004086aeb3): kobject_add_internal: parent: 'veth182', set: '' 14:42:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff4008ae90, &(0x7f0000000000)) [ 1018.877307][T32543] kobject: 'veth183' (000000004afbdaa7): kobject_add_internal: parent: 'net', set: 'devices' [ 1018.891817][T32543] kobject: 'veth183' (000000004afbdaa7): kobject_uevent_env [ 1018.900588][T32543] kobject: 'veth183' (000000004afbdaa7): fill_kobj_path: path = '/devices/virtual/net/veth183' [ 1018.912301][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env 14:42:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff4020940d, &(0x7f0000000000)) [ 1018.919958][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1018.931183][T32543] kobject: 'queues' (0000000024a376e4): kobject_add_internal: parent: 'veth183', set: '' [ 1018.942911][T32543] kobject: 'queues' (0000000024a376e4): kobject_uevent_env [ 1018.950725][T32543] kobject: 'queues' (0000000024a376e4): kobject_uevent_env: filter function caused the event to drop! 14:42:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff4020ae46, &(0x7f0000000000)) [ 1018.968789][T32543] kobject: 'rx-0' (0000000038ea12ed): kobject_add_internal: parent: 'queues', set: 'queues' [ 1018.984922][T32543] kobject: 'rx-0' (0000000038ea12ed): kobject_uevent_env [ 1018.992264][T32543] kobject: 'rx-0' (0000000038ea12ed): fill_kobj_path: path = '/devices/virtual/net/veth183/queues/rx-0' [ 1019.003270][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1019.004816][T32543] kobject: 'tx-0' (000000007def7b9a): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.017845][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1019.021440][T32543] kobject: 'tx-0' (000000007def7b9a): kobject_uevent_env [ 1019.038632][T32543] kobject: 'tx-0' (000000007def7b9a): fill_kobj_path: path = '/devices/virtual/net/veth183/queues/tx-0' [ 1019.052542][T32543] kobject: 'batman_adv' (000000006562794e): kobject_add_internal: parent: 'veth183', set: '' [ 1019.074821][T32551] kobject: 'veth6' (000000007187a972): kobject_add_internal: parent: 'net', set: 'devices' [ 1019.086337][T32551] kobject: 'veth6' (000000007187a972): kobject_uevent_env [ 1019.094125][T32551] kobject: 'veth6' (000000007187a972): fill_kobj_path: path = '/devices/virtual/net/veth6' [ 1019.100685][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1019.104919][T32551] kobject: 'queues' (00000000389a22cf): kobject_add_internal: parent: 'veth6', set: '' [ 1019.115134][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1019.122382][T32551] kobject: 'queues' (00000000389a22cf): kobject_uevent_env [ 1019.132016][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.139436][T32551] kobject: 'queues' (00000000389a22cf): kobject_uevent_env: filter function caused the event to drop! [ 1019.144988][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.156136][T32551] kobject: 'rx-0' (00000000f2814d88): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.161708][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.172061][T32551] kobject: 'rx-0' (00000000f2814d88): kobject_uevent_env [ 1019.177543][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.184798][T32551] kobject: 'rx-0' (00000000f2814d88): fill_kobj_path: path = '/devices/virtual/net/veth6/queues/rx-0' [ 1019.190363][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.201727][T32551] kobject: 'tx-0' (00000000dd4493dc): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.207071][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.217488][T32551] kobject: 'tx-0' (00000000dd4493dc): kobject_uevent_env [ 1019.230526][T32551] kobject: 'tx-0' (00000000dd4493dc): fill_kobj_path: path = '/devices/virtual/net/veth6/queues/tx-0' [ 1019.243012][T32551] kobject: 'batman_adv' (000000002e619612): kobject_add_internal: parent: 'veth6', set: '' [ 1019.258456][T32551] kobject: 'veth7' (00000000b41058d8): kobject_add_internal: parent: 'net', set: 'devices' [ 1019.269129][T32551] kobject: 'veth7' (00000000b41058d8): kobject_uevent_env [ 1019.278817][T32551] kobject: 'veth7' (00000000b41058d8): fill_kobj_path: path = '/devices/virtual/net/veth7' [ 1019.289297][T32551] kobject: 'queues' (000000008ba3179a): kobject_add_internal: parent: 'veth7', set: '' [ 1019.299597][T32551] kobject: 'queues' (000000008ba3179a): kobject_uevent_env [ 1019.306852][T32551] kobject: 'queues' (000000008ba3179a): kobject_uevent_env: filter function caused the event to drop! [ 1019.317839][T32551] kobject: 'rx-0' (0000000005bc3864): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.328014][T32551] kobject: 'rx-0' (0000000005bc3864): kobject_uevent_env [ 1019.335120][T32551] kobject: 'rx-0' (0000000005bc3864): fill_kobj_path: path = '/devices/virtual/net/veth7/queues/rx-0' [ 1019.346352][T32551] kobject: 'tx-0' (000000005a13a285): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.356674][T32551] kobject: 'tx-0' (000000005a13a285): kobject_uevent_env [ 1019.363762][T32551] kobject: 'tx-0' (000000005a13a285): fill_kobj_path: path = '/devices/virtual/net/veth7/queues/tx-0' [ 1019.375603][T32551] kobject: 'batman_adv' (00000000c2127e68): kobject_add_internal: parent: 'veth7', set: '' [ 1019.418602][ T3891] kobject: 'loop1' (00000000118f9a0f): kobject_uevent_env [ 1019.428255][ T3891] kobject: 'loop1' (00000000118f9a0f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1019.441038][ T3891] kobject: 'loop5' (0000000006aea56f): kobject_uevent_env [ 1019.451834][ T3891] kobject: 'loop5' (0000000006aea56f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1019.463048][ T3891] kobject: 'loop0' (00000000505687ad): kobject_uevent_env [ 1019.470715][ T3891] kobject: 'loop0' (00000000505687ad): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1019.594285][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.600156][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:42:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/116) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) 14:42:05 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2={0xff, 0x3}, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:42:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff40485404, &(0x7f0000000000)) 14:42:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:42:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x6, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:42:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff4090ae82, &(0x7f0000000000)) [ 1021.574798][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1021.575066][T32688] kobject: 'veth8' (00000000af6395c9): kobject_add_internal: parent: 'net', set: 'devices' [ 1021.582016][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1021.616425][T32688] kobject: 'veth8' (00000000af6395c9): kobject_uevent_env [ 1021.631813][T32688] kobject: 'veth8' (00000000af6395c9): fill_kobj_path: path = '/devices/virtual/net/veth8' [ 1021.637430][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1021.662075][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1021.668195][T32688] kobject: 'queues' (000000006d72e4f5): kobject_add_internal: parent: 'veth8', set: '' [ 1021.687047][T32688] kobject: 'queues' (000000006d72e4f5): kobject_uevent_env [ 1021.697867][T32688] kobject: 'queues' (000000006d72e4f5): kobject_uevent_env: filter function caused the event to drop! [ 1021.713246][T32688] kobject: 'rx-0' (0000000016638f9d): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.724045][T32688] kobject: 'rx-0' (0000000016638f9d): kobject_uevent_env [ 1021.739880][T32688] kobject: 'rx-0' (0000000016638f9d): fill_kobj_path: path = '/devices/virtual/net/veth8/queues/rx-0' [ 1021.753092][T32688] kobject: 'tx-0' (00000000088520a6): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.756009][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1021.763742][T32688] kobject: 'tx-0' (00000000088520a6): kobject_uevent_env [ 1021.775046][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' 14:42:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff4138ae84, &(0x7f0000000000)) 14:42:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x440800, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_elf32(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3c) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f00000000c0)=0x2, 0x440) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) splice(r5, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 1021.780982][T32688] kobject: 'tx-0' (00000000088520a6): fill_kobj_path: path = '/devices/virtual/net/veth8/queues/tx-0' [ 1021.803611][T32688] kobject: 'batman_adv' (000000004532f9f1): kobject_add_internal: parent: 'veth8', set: '' 14:42:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80001, 0x0) r2 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x1d) sendto$inet6(r2, &(0x7f0000000040)="91", 0xfffffffffffffe47, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) pipe(&(0x7f0000000100)) r3 = syz_open_dev$midi(0x0, 0x2, 0x800) ioctl$KDGETLED(r3, 0x4b31, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x111, 0x8}}, 0x20) r4 = openat$cgroup_int(r1, &(0x7f0000000200)='pids.max\x00', 0x2, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000240)='security.evm\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="040c374816937ef7653b6df9909d28925caae245c36103a8eed97bbd4ecf08fc081ca63c0d049a5c3f3f10ab674273dba53a64457506051d3cffccc312d7ce27d6dd2157438f3b603c7c0392bdc0c32c3bd4402bf281e664b55ecfa20469f133f6506601c91bc5ea0eab144ceb6308da329c215723744352571e2e95875598d9f4a944034b75d1e382a531dcfe0dd2d8a90220041341e738d6539cdde0dae493c7a3e4f74d28abe03dadf9cbd54e0576886b0f74d4dd25237135559de0036e0549f9b05870cc1f9d482dc7829e1400e475e6365b3d322e56d68c38f82944a17e12f28b901f25908d61e8378fe0895f00acb55d5f2c60e9e3"], 0x2, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = socket$inet6(0xa, 0x88000000000805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001680)={0x0, 0x0, 0x200}, 0x20) sendto$inet6(r6, &(0x7f0000000040)="91", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000800)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x21}}, r7}}, 0x48) r8 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r8, 0x4b31, 0x0) r9 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r9, 0x4b31, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x106, 0x8}}, 0x20) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x0, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000800)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x21}}, r12}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r12}}, 0xc) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:42:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff5000aea5, &(0x7f0000000000)) 14:42:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 1021.833442][ T3891] kobject: 'loop4' (000000008513432a): kobject_uevent_env [ 1021.859307][T32688] kobject: 'veth9' (00000000769c2c58): kobject_add_internal: parent: 'net', set: 'devices' [ 1021.861075][ T3891] kobject: 'loop4' (000000008513432a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1021.901786][T32688] kobject: 'veth9' (00000000769c2c58): kobject_uevent_env [ 1021.916460][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1021.933123][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' 14:42:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff7ff3ffcd, &(0x7f0000000000)) [ 1021.934991][T32688] kobject: 'veth9' (00000000769c2c58): fill_kobj_path: path = '/devices/virtual/net/veth9' [ 1021.967673][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1021.979649][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' 14:42:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x2bd}, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000140)={0x0, 0x4, 0x7}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x78) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)=[&(0x7f00000001c0)='filter\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='filter\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='em0@\x00', &(0x7f0000000380)='.wlan0@mime_typeem0cpuset-&self', &(0x7f00000003c0)='{nodevbdevbdevvmnet0wlan1trusted+\x00'], &(0x7f00000006c0)=[&(0x7f0000000440)='\x00', &(0x7f0000000480)='filter\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='&(keyring\x00', &(0x7f0000000540)='filter\x00', &(0x7f0000000580)='vmnet0user${\x00', &(0x7f00000005c0)='filter\x00', &(0x7f0000000600)='-&,\x00', &(0x7f0000000640)='bdev\x00', &(0x7f0000000680)='em1*\x00']) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) [ 1021.994928][T32688] kobject: 'queues' (000000001483a94d): kobject_add_internal: parent: 'veth9', set: '' [ 1022.012734][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1022.022351][T32688] kobject: 'queues' (000000001483a94d): kobject_uevent_env [ 1022.034482][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1022.060999][T32688] kobject: 'queues' (000000001483a94d): kobject_uevent_env: filter function caused the event to drop! [ 1022.075043][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1022.082408][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1022.093186][T32688] kobject: 'rx-0' (000000002a182519): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.107064][ T3891] kobject: 'loop4' (000000008513432a): kobject_uevent_env [ 1022.114781][T32688] kobject: 'rx-0' (000000002a182519): kobject_uevent_env [ 1022.129183][ T3891] kobject: 'loop4' (000000008513432a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1022.134298][T32688] kobject: 'rx-0' (000000002a182519): fill_kobj_path: path = '/devices/virtual/net/veth9/queues/rx-0' [ 1022.154392][T32688] kobject: 'tx-0' (0000000096d33216): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.173088][T32688] kobject: 'tx-0' (0000000096d33216): kobject_uevent_env [ 1022.173154][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1022.181569][T32688] kobject: 'tx-0' (0000000096d33216): fill_kobj_path: path = '/devices/virtual/net/veth9/queues/tx-0' [ 1022.203594][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1022.216545][T32688] kobject: 'batman_adv' (00000000a6a8bb45): kobject_add_internal: parent: 'veth9', set: '' [ 1022.232963][T32690] kobject: 'veth184' (0000000025ef2db3): kobject_add_internal: parent: 'net', set: 'devices' [ 1022.244565][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1022.252631][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1022.264264][T32690] kobject: 'veth184' (0000000025ef2db3): kobject_uevent_env [ 1022.272570][T32690] kobject: 'veth184' (0000000025ef2db3): fill_kobj_path: path = '/devices/virtual/net/veth184' [ 1022.287895][T32690] kobject: 'queues' (00000000b2d058f2): kobject_add_internal: parent: 'veth184', set: '' [ 1022.298504][T32690] kobject: 'queues' (00000000b2d058f2): kobject_uevent_env [ 1022.306120][T32690] kobject: 'queues' (00000000b2d058f2): kobject_uevent_env: filter function caused the event to drop! [ 1022.317514][T32690] kobject: 'rx-0' (00000000ea79f701): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.327862][T32690] kobject: 'rx-0' (00000000ea79f701): kobject_uevent_env [ 1022.335264][T32690] kobject: 'rx-0' (00000000ea79f701): fill_kobj_path: path = '/devices/virtual/net/veth184/queues/rx-0' [ 1022.346612][T32690] kobject: 'tx-0' (0000000076ae74fe): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.356953][T32690] kobject: 'tx-0' (0000000076ae74fe): kobject_uevent_env [ 1022.364124][T32690] kobject: 'tx-0' (0000000076ae74fe): fill_kobj_path: path = '/devices/virtual/net/veth184/queues/tx-0' [ 1022.377088][T32690] kobject: 'batman_adv' (000000002aa45c38): kobject_add_internal: parent: 'veth184', set: '' [ 1022.389084][T32690] kobject: 'veth185' (00000000dbbd59c4): kobject_add_internal: parent: 'net', set: 'devices' [ 1022.399901][T32690] kobject: 'veth185' (00000000dbbd59c4): kobject_uevent_env [ 1022.407369][T32690] kobject: 'veth185' (00000000dbbd59c4): fill_kobj_path: path = '/devices/virtual/net/veth185' [ 1022.418068][T32690] kobject: 'queues' (000000002b83a745): kobject_add_internal: parent: 'veth185', set: '' [ 1022.428461][T32690] kobject: 'queues' (000000002b83a745): kobject_uevent_env [ 1022.435728][T32690] kobject: 'queues' (000000002b83a745): kobject_uevent_env: filter function caused the event to drop! [ 1022.446729][T32690] kobject: 'rx-0' (00000000ab1cb7c9): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.456899][T32690] kobject: 'rx-0' (00000000ab1cb7c9): kobject_uevent_env [ 1022.463952][T32690] kobject: 'rx-0' (00000000ab1cb7c9): fill_kobj_path: path = '/devices/virtual/net/veth185/queues/rx-0' [ 1022.475279][T32690] kobject: 'tx-0' (00000000cd5d171d): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.485587][T32690] kobject: 'tx-0' (00000000cd5d171d): kobject_uevent_env [ 1022.492650][T32690] kobject: 'tx-0' (00000000cd5d171d): fill_kobj_path: path = '/devices/virtual/net/veth185/queues/tx-0' 14:42:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r2 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="3b2337be217a03add0d334485d96b9a79641cc934427", 0x16, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540)=0x0, &(0x7f00000006c0)) keyctl$chown(0x4, r3, r4, r5) keyctl$chown(0x4, r2, r4, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x302, 0x1070bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xca1aa9fe542dca49}, 0x4800) r6 = syz_open_dev$midi(0x0, 0x0, 0x0) r7 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r7, 0x4b31, 0x0) execveat(r7, &(0x7f0000000340)='./file0\x00', &(0x7f0000000700)=[&(0x7f00000003c0)='{]selinuxwlan1/\x00', &(0x7f0000000440)='/dev/ptmx\x00', &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000580)='asymmetric\x00'], &(0x7f0000000900)=[&(0x7f0000000740)='asymmetric\x00', &(0x7f00000009c0)='/dev/ptmx\x00', &(0x7f00000007c0)='syz', &(0x7f0000000940)='\x00', &(0x7f0000000980)='selfselinux\x00', &(0x7f0000000880)='ppp1posix_acl_accessposix_acl_accesswlan1\'\x00', &(0x7f00000008c0)='/dev/ptmx\x00'], 0x800) ioctl$CAPI_GET_MANUFACTURER(r7, 0xc0044306, &(0x7f00000001c0)=0x5) ioctl$KDGETLED(r6, 0x4b31, 0x0) write$P9_RSYMLINK(r6, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x4, 0x0, 0x6}}, 0x14) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x62048d0}, 0xc) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000240)) 14:42:06 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2={0xff, 0x4}, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1022.505151][T32690] kobject: 'batman_adv' (000000002cc11dbd): kobject_add_internal: parent: 'veth185', set: '' 14:42:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 14:42:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff80044945, &(0x7f0000000000)) 14:42:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syslog(0x4, &(0x7f0000000140)=""/4096, 0x1000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x19fd2925cb01abed, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) 14:42:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507ebff00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x8, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 1022.555579][ T3891] kobject: 'loop1' (00000000118f9a0f): kobject_uevent_env [ 1022.571603][ T3891] kobject: 'loop1' (00000000118f9a0f): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:42:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff80045430, &(0x7f0000000000)) 14:42:07 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2={0xff, 0x5}, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 1022.607052][ T591] kobject: 'veth10' (000000009e70246b): kobject_add_internal: parent: 'net', set: 'devices' [ 1022.607653][ T3891] kobject: 'loop0' (00000000505687ad): kobject_uevent_env [ 1022.630209][ T3891] kobject: 'loop0' (00000000505687ad): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1022.646759][ T591] kobject: 'veth10' (000000009e70246b): kobject_uevent_env 14:42:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xff59, 0x0, 0x0}) [ 1022.678138][ T3891] kobject: 'loop5' (0000000006aea56f): kobject_uevent_env [ 1022.687686][ T591] kobject: 'veth10' (000000009e70246b): fill_kobj_path: path = '/devices/virtual/net/veth10' [ 1022.709485][ T3891] kobject: 'loop5' (0000000006aea56f): fill_kobj_path: path = '/devices/virtual/block/loop5' 14:42:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8080, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000080)={0x3, 0x4, 0x7ff}) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) 14:42:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff800454d2, &(0x7f0000000000)) [ 1022.733424][ T591] kobject: 'queues' (00000000f13bd706): kobject_add_internal: parent: 'veth10', set: '' [ 1022.749736][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1022.771821][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' 14:42:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff8008563f, &(0x7f0000000000)) [ 1022.791095][ T591] kobject: 'queues' (00000000f13bd706): kobject_uevent_env [ 1022.802209][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1022.810833][ T591] kobject: 'queues' (00000000f13bd706): kobject_uevent_env: filter function caused the event to drop! [ 1022.816190][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' 14:42:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @multicast2}, 0xa0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x7fff, 0x9}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r4, 0x0, 0x0, "b1"}, 0x9) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000000)=r4, 0x4) 14:42:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x60048d0}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x28, 0x11, 0x30479e840602a76b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x40080004}, 0xffffffbb) [ 1022.845603][ T3891] kobject: 'loop4' (000000008513432a): kobject_uevent_env [ 1022.853036][ T3891] kobject: 'loop4' (000000008513432a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1022.872562][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1022.890077][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1022.923843][ T591] kobject: 'rx-0' (0000000099e242c9): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.926171][ T3891] kobject: 'loop3' (00000000ed1ac9b4): kobject_uevent_env [ 1022.949703][ T3891] kobject: 'loop3' (00000000ed1ac9b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1022.950102][ T591] kobject: 'rx-0' (0000000099e242c9): kobject_uevent_env [ 1022.967743][ T3891] kobject: 'loop2' (000000008aead6e1): kobject_uevent_env [ 1022.971184][ T591] kobject: 'rx-0' (0000000099e242c9): fill_kobj_path: path = '/devices/virtual/net/veth10/queues/rx-0' [ 1022.975293][ T3891] kobject: 'loop2' (000000008aead6e1): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1022.986870][ T591] kobject: 'tx-0' (000000001c6ea0fb): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.000743][ T3891] kobject: 'loop4' (000000008513432a): kobject_uevent_env [ 1023.010493][ T591] kobject: 'tx-0' (000000001c6ea0fb): kobject_uevent_env [ 1023.018985][ T3891] kobject: 'loop4' (000000008513432a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1023.021048][ T591] kobject: 'tx-0' (000000001c6ea0fb): fill_kobj_path: path = '/devices/virtual/net/veth10/queues/tx-0' [ 1023.046847][ T591] kobject: 'batman_adv' (0000000076130983): kobject_add_internal: parent: 'veth10', set: '' [ 1023.075306][ T591] kobject: 'veth11' (0000000006c04802): kobject_add_internal: parent: 'net', set: 'devices' [ 1023.089601][ T591] kobject: 'veth11' (0000000006c04802): kobject_uevent_env [ 1023.096990][ T591] kobject: 'veth11' (0000000006c04802): fill_kobj_path: path = '/devices/virtual/net/veth11' [ 1023.116830][ T591] kobject: 'queues' (000000007ef52dbb): kobject_add_internal: parent: 'veth11', set: '' [ 1023.162272][ T591] kobject: 'queues' (000000007ef52dbb): kobject_uevent_env [ 1023.171146][ T591] kobject: 'queues' (000000007ef52dbb): kobject_uevent_env: filter function caused the event to drop! [ 1023.203147][ T591] kobject: 'rx-0' (0000000023039133): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.215249][ T591] kobject: 'rx-0' (0000000023039133): kobject_uevent_env [ 1023.222498][ T591] kobject: 'rx-0' (0000000023039133): fill_kobj_path: path = '/devices/virtual/net/veth11/queues/rx-0' [ 1023.233958][ T591] kobject: 'tx-0' (0000000002c9b140): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.244317][ T591] kobject: 'tx-0' (0000000002c9b140): kobject_uevent_env [ 1023.251406][ T591] kobject: 'tx-0' (0000000002c9b140): fill_kobj_path: path = '/devices/virtual/net/veth11/queues/tx-0' [ 1023.263378][ T591] kobject: 'batman_adv' (0000000035b3d021): kobject_add_internal: parent: 'veth11', set: '' [ 1023.276221][ T594] kobject: 'veth186' (000000001fc04fd0): kobject_add_internal: parent: 'net', set: 'devices' [ 1023.287715][ T594] kobject: 'veth186' (000000001fc04fd0): kobject_uevent_env [ 1023.295240][ T594] kobject: 'veth186' (000000001fc04fd0): fill_kobj_path: path = '/devices/virtual/net/veth186' [ 1023.306018][ T594] kobject: 'queues' (0000000099990908): kobject_add_internal: parent: 'veth186', set: '' [ 1023.316772][ T594] kobject: 'queues' (0000000099990908): kobject_uevent_env [ 1023.323970][ T594] kobject: 'queues' (0000000099990908): kobject_uevent_env: filter function caused the event to drop! [ 1023.335027][ T594] kobject: 'rx-0' (000000004b37829e): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.345207][ T594] kobject: 'rx-0' (000000004b37829e): kobject_uevent_env [ 1023.352268][ T594] kobject: 'rx-0' (000000004b37829e): fill_kobj_path: path = '/devices/virtual/net/veth186/queues/rx-0' [ 1023.363750][ T594] kobject: 'tx-0' (0000000050d6caef): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.374354][ T594] kobject: 'tx-0' (0000000050d6caef): kobject_uevent_env [ 1023.381447][ T594] kobject: 'tx-0' (0000000050d6caef): fill_kobj_path: path = '/devices/virtual/net/veth186/queues/tx-0' [ 1023.393334][ T594] kobject: 'batman_adv' (000000009e1cde5a): kobject_add_internal: parent: 'veth186', set: '' [ 1023.405999][ T594] kobject: 'veth187' (000000001a018318): kobject_add_internal: parent: 'net', set: 'devices' [ 1023.416872][ T594] kobject: 'veth187' (000000001a018318): kobject_uevent_env [ 1023.424246][ T594] kobject: 'veth187' (000000001a018318): fill_kobj_path: path = '/devices/virtual/net/veth187' [ 1023.434669][ T594] kobject: 'queues' (0000000017b2fd37): kobject_add_internal: parent: 'veth187', set: '' [ 1023.445058][ T594] kobject: 'queues' (0000000017b2fd37): kobject_uevent_env [ 1023.452248][ T594] kobject: 'queues' (0000000017b2fd37): kobject_uevent_env: filter function caused the event to drop! [ 1023.463247][ T594] kobject: 'rx-0' (0000000045baf80d): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.473377][ T594] kobject: 'rx-0' (0000000045baf80d): kobject_uevent_env [ 1023.480473][ T594] kobject: 'rx-0' (0000000045baf80d): fill_kobj_path: path = '/devices/virtual/net/veth187/queues/rx-0' [ 1023.491698][ T594] kobject: 'tx-0' (000000004e408b93): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.501958][ T594] kobject: 'tx-0' (000000004e408b93): kobject_uevent_env [ 1023.509073][ T594] kobject: 'tx-0' (000000004e408b93): fill_kobj_path: path = '/devices/virtual/net/veth187/queues/tx-0' [ 1023.521048][ T594] kobject: 'batman_adv' (00000000cc47e0df): kobject_add_internal: parent: 'veth187', set: '' 14:42:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbff80086301, &(0x7f0000000000)) 14:42:07 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2={0xff, 0x6}, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 14:42:08 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0xa0002, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x109100, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0xfffffffffffffef9, 0x0, 0x0}) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4808a0, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r2, 0x4b31, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0), 0x8) ioctl$KDGETLED(r3, 0x4b31, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000200)=""/90) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x501600, 0x0) r5 = semget$private(0x0, 0x2, 0xcce6b08e34803fa8) semctl$GETVAL(r5, 0x0, 0xc, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000180)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x7, 0x8})